{"schema":"threatline.record/2","record":{"id":"CVE-2026-107320","aliases":[],"summary":"GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure","details":"The GamiPress  WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.","categories":["Unclassified"],"product":"GamiPress","vendor":"Unknown","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-107320","source_modified_at":"2026-10-14T13:42:22.621Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"GamiPress","vendor":"Unknown","versions":[{"status":"affected","versionType":"semver","version":"7.9.5","lessThan":"8.0.6"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-107320","source_modified_at":"2026-10-14T13:42:22.621Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"GamiPress","ecosystem":null},"version":"8.0.6","basis":"first unaffected version stated in the CVE record"}],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.0033,"percentile":0.24922,"score_date":"2026-10-23"},"published_at":"2026-10-14T06:00:11.595Z","modified_at":"2026-10-14T13:42:22.621Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-107320","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T13:42:22.621Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-107320","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-6762ab96725f/","tags":["exploit","vdb-entry","technical-description"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-14T13:29:27.784196Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-14T13:42:22.621Z","content_hash":"1698252498f721d9580651f55e84eef1c5bd20a2f0dc2d9ee938090dbcd41407"}}