What is GHSA-v48m-jwvg-42cg?

GHSA-v48m-jwvg-42cg is a security advisory published by GitHub Security Advisories with unknown severity. The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private...

Which CVE IDs does GHSA-v48m-jwvg-42cg cover?

GHSA-v48m-jwvg-42cg covers the following CVE IDs: CVE-2026-107320. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-v48m-jwvg-42cgunknown

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-107320 →

📋 Description

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-107320
https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-6762ab96725f
https://github.com/advisories/GHSA-v48m-jwvg-42cg