CVE-2026-94177

Summary

This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption.

Exploitability

Exploitation requires access to the web application and knowledge of the SQL injection vulnerability. Precondition is the use of an affected GamiPress version <= 8.0.2.

Blast radius

If exploited, the attacker could gain full control over the database, leading to data loss or theft.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to GamiPress 8.0.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.