CVE-2025-13812

Name of the Vulnerable Software and Affected Versions GamiPress – Gamification plugin for WordPress versions prior to 7.6.2

Description The GamiPress – Gamification plugin for WordPress is susceptible to unauthorized data access. A missing capability check in the gamipress ajax get posts and gamipress ajax get users functions allows authenticated attackers with Subscriber-level access or higher to enumerate users, including their email addresses, and retrieve titles of private posts.

Recommendations Update to version 7.6.2 or later.