Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

Güvenlik açıkları

• CVE-2024-43354kimlik doğrulamasız≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2023-35096kimlik doğrulamasız≤ 2.5

  WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2026-40794abone+≤ 3.0.3

  WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-42676giriş gerekir≤ 3.0.4

  WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-27440giriş gerekir≤ 2.9.7.6

  WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-54668giriş gerekir≤ 2.9.4.3

  WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2024-43353giriş gerekir≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-32711giriş gerekir≤ 2.6.3

  WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-17149katılımcı+≤ 3.2.4

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripti

  Orta 6.4

• CVE-2026-8607katılımcı+≤ 3.1

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-0550katılımcı+≤ 2.9.7.3

  myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode

  Orta 6.4

• CVE-2024-11201katılımcı+≤ 2.7.5.2

  myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode

  Orta 6.4

• CVE-2021-25015kimlik doğrulamasız · tıklama gerekir→ 2.4

  myCred < 2.4 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2017-20008kimlik doğrulamasız · tıklama gerekir→ 1.7.8

  myCRED < 1.7.8 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2026-61968giriş gerekir≤ 3.1.2

  WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2023-47853giriş gerekir≤ 2.6.1

  WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-10187katılımcı+≤ 2.7.4

  myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode

  Orta 5.4

• CVE-2025-12362kimlik doğrulamasız≤ 2.9.7

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Ap

  Orta 5.3

• CVE-2025-54667kimlik doğrulamasız≤ 2.9.4.3

  WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

  Orta 5.3

• CVE-2025-49872kimlik doğrulamasız≤ 2.9.4.2

  WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

  Orta 5.3

• CVE-2024-8658kimlik doğrulamasız≤ 2.7.3

  myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits fo

  Orta 5.3

• CVE-2024-43214kimlik doğrulamasız≤ 2.7.2

  WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

  Orta 5.3

• CVE-2026-24951giriş gerekir≤ 2.9.7.3

  WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2025-12361abone+≤ 2.9.7.1

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure

  Orta 4.3

• CVE-2025-49857giriş gerekir≤ 2.9.4.2

  WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

  Orta 4.3