CVE-2026-107320

Published: Ott 14, 2026 Last Modified: Ott 14, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-67…
https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-6762ab96725f/