GA
Vendor
gamerz
9
CVEs
0
On KEV
0
New 30D
Products
WP7.2
WP-DownloadManager
gamerz
5 CVEs0 on KEV0 new
WP7.2
WP-Stats
gamerz
2 CVEs0 on KEV0 new
WP5.3
WP-Polls
gamerz
1 CVEs0 on KEV0 new
WP6.1
WP-PostRatings
GamerZ
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19794 | WP WP-Stats gamerz | 7.2 | Aug 14 | WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-2426 | WP WP-DownloadManager gamerz | 6.5 | Feb 18 | WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter |
| CVE-2026-2419 | WP WP-DownloadManager gamerz | 2.7 | Feb 18 | WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter |
| CVE-2025-10747 | WP WP-DownloadManager gamerz | 7.2 | Sep 26 | WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload |
| CVE-2025-4799 | WP WP-DownloadManager gamerz | 7.2 | Jun 11 | WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion |
| CVE-2025-4798 | WP WP-DownloadManager gamerz | 4.9 | Jun 11 | WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read |
| CVE-2024-13426 | WP WP-Polls gamerz | 5.3 | Jan 22 | WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting |
| CVE-2011-10006 | WP WP-PostRatings GamerZ | 6.1 | Apr 8 | GamerZ WP-PostRatings wp-postratings.php cross site scripting |
| CVE-2006-0238 | WP Wp-stats Gamerz | – | Jan 18 | SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter |