UNKNOWN NVD

CVE-2026-107320

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

References

https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-6762ab96725f/

Published: 2026-10-14 · Source: NVD · Feed updated: 2026-10-14

This unknown severity vulnerability was published on 2026-10-14 via NVD.

vulnfeed aggregates 14664 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.