medium4.3
CVE-2026-77764
The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscribe…
Impact
The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the configured gamification points, achievements and ranks to arbitrary users including administrators, and to accrue them without limit.
Affected products
| Product | Affected versions |
|---|---|
| GamiPress WordPress Plugin | before 7.9.9.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.