CyberRota Analysis
AI-GeneratedThe GamiPress WordPress plugin prior to version 7.9.9.6 is vulnerable due to inadequate restrictions on its video watch-tracking feature, enabling users with minimal privileges, such as Subscribers, to grant gamification points, achievements, and ranks to any user, including administrators. This flaw can lead to unauthorized manipulation of user rewards and rankings, potentially undermining the integrity of the gamification system. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the configured gamification points, achievements and ranks to arbitrary users including administrators, and to accrue them without limit.