Executive Summary

This vulnerability in the GamiPress WordPress plugin allows authenticated users with Subscriber-level access or higher to bypass proper capability checks in the gamipress_ajax_get_posts and gamipress_ajax_get_users functions. As a result, these users can enumerate other users, including accessing their email addresses, and retrieve titles of private posts, which they should not normally be able to see.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is unauthorized disclosure of user data and private content. Attackers with low-level authenticated access can gather email addresses of users and view titles of private posts, potentially leading to privacy breaches, targeted phishing, or other malicious activities that exploit exposed user information.

Useful 0 Not Useful 0

Mitigation Strategies

Update the GamiPress plugin to version 7.6.2 or later, as this version includes a major update that likely addresses the vulnerability by fixing the missing capability checks. Until the update is applied, restrict Subscriber-level access where possible to limit exposure. [1]

Useful 0 Not Useful 0