rubengc has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 6.4 (medium). Most affected products: GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI (2), AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Products
- GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI 2
- AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI 1
Worst active — by depth score
CVE-2026-15439Medium· 6.5GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection36CVE-2026-14379Medium· 6.4The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video_id' parameter in all versions up to, and including, 7.9.4 du…35CVE-2026-104728Medium· 4.3The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.424
rubengc vulnerabilities
CVEs affecting rubengc, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-104728Medium· 4.3The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4
The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly veri…
CVE-2026-14379Medium· 6.4The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video_id' parameter in all versions up to, and including, 7.9.4 du…
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video_id' parameter in all versions up to, and including, 7.9.4 du…
CVE-2026-15439Medium· 6.5GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection
The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of the wpForo integration AJAX selector (action gamipress_wpforo_get_posts) in versions up to, and including, 7.9.7. The …