| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.2 - Missing AuthorizationCVE-2026-103077 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.2 - Missing AuthorizationCVE-2026-97072 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.1 - Missing AuthorizationCVE-2026-115962 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.2 - Missing AuthorizationCVE-2026-97073 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.0-beta.1 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-114698 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode AttributeCVE-2026-17149 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.2.5 - Unauthenticated Payment BypassCVE-2026-15150 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 3.1.2 - Missing AuthorizationCVE-2026-61968 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode AttributeCVE-2026-8607 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-42676 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing AuthorizationCVE-2026-40794 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-27440 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' ShortcodeCVE-2026-0550 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.7.3 - Missing AuthorizationCVE-2026-24951 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information ExposureCVE-2025-12361 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request ApprovalCVE-2025-12362 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race ConditionCVE-2025-54667 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-54668 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.4.2 - Missing AuthorizationCVE-2025-49857 |
mycred |
WordPress |
Medium
|
Fix reported |
|
| myCred <= 2.9.4.2 - Missing AuthorizationCVE-2025-49872 |
mycred |
WordPress |
Medium
|
Fix reported |
|
