The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · NIST NVD

   Detected

   The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

2. Oct 14, 2026 · NIST NVD

   Updated

   The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

Sources

• CVE.orgVulnerability recordCVE-2026-107320

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-107320

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-107320

  The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

  nvd.nist.gov

References

• Reference · wpscan.com