Skip to content
Mycred vulnerabilities
Newest
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-123462
5.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-122668
4.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-124274
5.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability
CVE-2026-123471
4.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-97072
4.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-103077
4.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-97073
5.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability
CVE-2026-115962
4.3 Medium
-
mycred
WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-114698
5.4 Medium
-
mycred new user approve
WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability
CVE-2026-28163
5.3 Medium
-
mycred license manager for woocommerce
WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-56013
6.5 Medium
-
mycred
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-40794
6.5 Medium
-
mycred bookify
WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2025-69332
6.5 Medium
-
mycred
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42676
6.5 Medium
-
mycred, saadiqbal points management system for gamification, ranks, badges, and loyalty rewards program – mycred +1 more
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
CVE-2024-10187
6.4 Medium
-
mycred elementor, saad iqbal mycred elementor +1 more
WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49702
6.5 Medium
-
mycred, saadiqbal points management system for gamification, ranks, badges, and loyalty rewards program – mycred +1 more
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Author…
CVE-2024-8658
5.3 Medium
-
mycred
WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability
CVE-2024-43214
5.3 Medium
-
mycred
WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability
CVE-2024-43354
9.8 Critical
-
mycred – points, rewards, gamification, ranks, badges & loyalty plugin, wpexperts mycred +1 more
WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47853
6.5 Medium
-
mycred
WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35096
5.4 Medium
-
mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more
myCred < 2.4 - Reflected Cross-Site Scripting
CVE-2021-25015
6.1 Medium
-
wpexperts mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more
myCred < 2.3 - Subscriber+ SQL Injection
CVE-2021-24755
8.8 High
-
mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more
myCRED < 1.7.8 - Reflected Cross-Site Scripting
CVE-2017-20008
6.1 Medium