CVE-2026-48874

HighCVSS 8.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

GamiPress versions up to 7.8.7 contain a SQL Injection vulnerability that can be exploited by subscribers.

An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to update GamiPress to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Subscriber SQL Injection in GamiPress <= 7.8.7 versions.