WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mycred
Published
2024-08-16
Title
myCred < 2.7.3 - Unauthenticated PHP Object Injection
Slug
mycred
Published
2024-09-24
Title
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification < 2.7.4 - Missing Authorization to Unauthenticated Database Upgrade
Slug
mycred
Published
2024-11-07
Title
myCred < 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Slug
mycred
Published
2024-12-05
Title
myCred – Loyalty Points and Rewards plugin < 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
Slug
mycred
Published
2025-06-12
Title
myCred < 2.9.4.3 - Missing Authorization
Slug
mycred
Published
2025-06-12
Title
myCred < 2.9.4.3 - Missing Authorization
Slug
mycred
Published
2025-07-30
Title
myCred < 2.9.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mycred
Published
2025-07-30
Title
myCred < 2.9.4.4 - Authenticated (Subscriber+) Race Condition
Slug
mycred
Published
2025-12-12
Title
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program < 2.9.7.1 - Missing Authorization to Unauthenticated Withdrawal Request Approval
Slug
mycred
Published
2025-12-18
Title
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program < 2.9.7.2 - Missing Authorization to Sensitive Information Exposure
Slug
mycred
Published
2026-02-06
Title
myCred < 2.9.7.4 - Missing Authorization
Slug
mycred
Published
2026-02-13
Title
myCred < 2.9.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode
Slug
mycred
Published
2025-11-08
Title
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mycred
Published
2026-04-24
Title
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.0.4 - Missing Authorization
Slug
mycred
Published
2026-05-15
Title
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
mycred
Published
2026-06-16
Title
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute
Slug
mycred
Published
2026-07-29
Title
myCred < 3.2.0 - Missing Authorization
Slug
mycred
Published
2026-08-17
Title
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
Slug
mycred
Published
2026-09-08
Title
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
Slug
mycred
Published
2026-10-22
Title
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 4.0.0-beta.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
mycred
Published
2026-10-29
Title
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 4.0.3 - Missing Authorization
Slug
mycred
Published
2026-10-27
Title
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 4.0.2 - Missing Authorization
Slug
mycred-for-elementor
Published
2024-10-21
Title
myCred Elementor < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mycryptocheckout
Published
2023-04-06
Title
MyCryptoCheckout < 2.124 - Reflected XSS
Slug
mycryptocheckout
Published
2023-09-04
Title
MyCryptoCheckout < 2.126 - CSRF