CVE-2026-59538

CriticalCVSS 9.3

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Summary

The GamiPress plugin for WordPress version 7.9.7 and earlier contains an unauthenticated SQL injection vulnerability.

An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage, database modification, or site compromise.

Immediately update the GamiPress plugin to the latest version that includes a fix.

Original NVD description (English source)

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.