Skip to contentSaad Iqbal Mycred vulnerabilities
- mycredWordPress myCred plugin <= 4.0.2 - SQL Injection vulnerabilityCVE-2026-1258118.5 High
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-1258104.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1258096.5 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Content Injection vulnerabilityCVE-2026-1257784.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Sensitive Data Exposure vulnerabilityCVE-2026-1234657.5 High
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-1234625.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-1226684.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-1242745.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Content Injection vulnerabilityCVE-2026-1234714.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-970724.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-1030774.3 Medium
- mycredWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilityCVE-2026-970735.3 Medium
- mycredWordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerabilityCVE-2026-1159624.3 Medium
- mycredWordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1146985.4 Medium
- saad iqbal mycredmyCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCREDCVE-2026-151505.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerabilityCVE-2026-619685.4 Medium
- mycredWordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerabilityCVE-2026-407946.5 Medium
- mycredWordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-426766.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-274406.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerabilityCVE-2026-249514.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-546686.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Race Condition VulnerabilityCVE-2025-546675.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityCVE-2025-498574.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityCVE-2025-498725.3 Medium
- mycred elementor, saad iqbal mycred elementor +1 moreWordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-497026.5 Medium
- mycredWordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerabilityCVE-2024-432145.3 Medium
- mycredWordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerabilityCVE-2024-433549.8 Critical
- saad iqbal mycredWordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-433536.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-327116.5 Medium
- mycredWordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-350965.4 Medium
- saad iqbal mycredmyCred < 2.4.4 - Subscriber+ Import/Export to Email Address DisclosureCVE-2022-10924.3 Medium
- saad iqbal mycredmyCred < 2.4.4 - Subscriber+ Arbitrary Post CreationCVE-2022-03634.3 Medium
- saad iqbal mycredMycred < 2.4.4.1 - Subscriber+ User E-mail Addresses DisclosureCVE-2022-02874.3 Medium