Unknown Mycred vulnerabilities

• saad iqbal mycred myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED CVE-2026-15150 5.3 MediumAugust 21, 2026
• saad iqbal mycred myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure CVE-2022-1092 4.3 MediumApril 25, 2022
• saad iqbal mycred myCred < 2.4.4 - Subscriber+ Arbitrary Post Creation CVE-2022-0363 4.3 MediumApril 25, 2022
• saad iqbal mycred Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure CVE-2022-0287 4.3 MediumApril 25, 2022
• mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more myCred < 2.4 - Reflected Cross-Site Scripting CVE-2021-25015 6.1 MediumJanuary 24, 2022
• wpexperts mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more myCred < 2.3 - Subscriber+ SQL Injection CVE-2021-24755 8.8 HighNovember 29, 2021
• mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 more myCRED < 1.7.8 - Reflected Cross-Site Scripting CVE-2017-20008 6.1 MediumNovember 29, 2021