{"id":"CVE-2026-112837","kind":"vulnerability","aliases":["CVE-2026-112837"],"related":[],"title":"GamiPress WordPress plugin: blind SQL injection through 8.0.7","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7.","summary":"The GamiPress WordPress gamification plugin contains a blind SQL injection flaw in versions through 8.0.7. An attacker can run database queries through the vulnerable input and read site data one inference at a time.","severity":"high","cvss":8.5,"epss":0.00211,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gamipress","package","self-hosted","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed GamiPress version in the WordPress admin plugins list or with `wp plugin get gamipress --field=version`\n- Compare the result against `8.0.7`","fix":"- Update GamiPress to a version later than `8.0.7` once the vendor publishes a patched release (unknown from the sources)\n- Until patched, disable the GamiPress plugin if it is not essential","status":"open","published_at":"2026-10-23T09:17:06+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:00:17+00:00","updated_at":"2026-10-25T03:00:17+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:00:17Z","model":"claude-haiku-5-5","output":{"fix":"- Update GamiPress to a version later than `8.0.7` once the vendor publishes a patched release (unknown from the sources)\n- Until patched, disable the GamiPress plugin if it is not essential","reach":"internet","title":"GamiPress WordPress plugin: blind SQL injection through 8.0.7","impact":"high","summary":"The GamiPress WordPress gamification plugin contains a blind SQL injection flaw in versions through 8.0.7. An attacker can run database queries through the vulnerable input and read site data one inference at a time.","category":"package","nicknames":[],"who_cares":["wordpress","gamipress","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker reads database contents, including user and credential data","analyst_note":"Confirm the affected input, whether authentication is required, and the patched version from the NVD entry or the vendor advisory.","how_to_check":"- Check the installed GamiPress version in the WordPress admin plugins list or with `wp plugin get gamipress --field=version`\n- Compare the result against `8.0.7`","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the GamiPress plugin version 8.0.7 or earlier are affected, typically WordPress sites using it for points, badges or achievements. The sources do not say which specific feature or input is vulnerable, so any site with the plugin active should be treated as exposed. Sites without GamiPress installed can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000615,"input_tokens":3354,"output_tokens":559,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-112837':11A,14A '-2026':10A,13A '8.0.7':8A,35B,83C 'affect':78C 'allow':73C 'attack':37B 'blind':4A,28B,74C 'command':64C 'contain':26B 'cve':9A,12A 'data':49B 'databas':40B 'element':59C 'flaw':31B 'gamif':24B 'gamipress':1A,15B,22B,71C,72C,79C 'garcia':70C 'host':19B 'improp':55C 'infer':51B 'inject':6A,30B,66C 'injection.this':76C 'input':45B 'issu':77C 'n/a':81C 'neutral':56C 'one':50B 'packag':16B 'plugin':3A,25B 'queri':41B 'read':47B 'ruben':69C 'run':39B 'self':18B 'self-host':17B 'site':48B 'special':58C 'sql':5A,29B,63C,65C,75C 'time':54B 'use':60C 'version':33B 'vulner':44B,67C 'wordpress':2A,20B,23B","nicknames":[],"mitigations":[],"who_affected":"Sites running the GamiPress plugin version 8.0.7 or earlier are affected, typically WordPress sites using it for points, badges or achievements. The sources do not say which specific feature or input is vulnerable, so any site with the plugin active should be treated as exposed. Sites without GamiPress installed can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T09:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112837","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112837","severity":null,"published_at":"2026-10-23T09:17:06+00:00","modified_at":"2026-10-23T16:06:31+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-112837","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-112837","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}