GamiPress WordPress Plugin Unauthenticated Arbitrary Shortcode Execution Vulnerability

A vulnerability exists in the GamiPress WordPress plugin, specifically in versions through 7.2.1, allowing for unauthenticated arbitrary shortcode execution. This issue arises because the plugin's 'gamipress_do_shortcode()' function fails to properly validate shortcode arguments before processing them, enabling attackers to execute arbitrary shortcodes on the site.

Impact

Exploitation of this vulnerability could lead to unauthorized users executing arbitrary shortcodes, potentially allowing them to inject and execute malicious code or actions on the WordPress site.

Remediation

Users are advised to update the GamiPress WordPress plugin to version 7.2.2 or later, where this vulnerability has been patched.