Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

Уязвимости

• CVE-2024-43354без авторизации≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

  Критич. 9.8

• CVE-2023-35096без авторизации≤ 2.5

  WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-40794подписчик+≤ 3.0.3

  WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-42676нужен вход≤ 3.0.4

  WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-27440нужен вход≤ 2.9.7.6

  WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2025-54668нужен вход≤ 2.9.4.3

  WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2024-43353нужен вход≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2024-32711нужен вход≤ 2.6.3

  WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-17149участник+≤ 3.2.4

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripti

  Средний 6.4

• CVE-2026-8607участник+≤ 3.1

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2026-0550участник+≤ 2.9.7.3

  myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode

  Средний 6.4

• CVE-2024-11201участник+≤ 2.7.5.2

  myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode

  Средний 6.4

• CVE-2021-25015без авторизации · нужен клик→ 2.4

  myCred < 2.4 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2017-20008без авторизации · нужен клик→ 1.7.8

  myCRED < 1.7.8 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2026-61968нужен вход≤ 3.1.2

  WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2023-47853нужен вход≤ 2.6.1

  WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2024-10187участник+≤ 2.7.4

  myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode

  Средний 5.4

• CVE-2025-12362без авторизации≤ 2.9.7

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Ap

  Средний 5.3

• CVE-2025-54667без авторизации≤ 2.9.4.3

  WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

  Средний 5.3

• CVE-2025-49872без авторизации≤ 2.9.4.2

  WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

  Средний 5.3

• CVE-2024-8658без авторизации≤ 2.7.3

  myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits fo

  Средний 5.3

• CVE-2024-43214без авторизации≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2026-24951нужен вход≤ 2.9.7.3

  WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2025-12361подписчик+≤ 2.9.7.1

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure

  Средний 4.3

• CVE-2025-49857нужен вход≤ 2.9.4.2

  WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

  Средний 4.3