Перейти к содержимому
Noroxi

myCred

mycred · плагин

Известные уязвимости для myCred. Узнайте за секунды, какая версия работает на вашем сайте, с WP Lens.

25 известных уязвимостей

1 критичных · 1 с публичным эксплойтом · последняя 9 сент. 2026 г.

Уязвимости

  • CVE-2024-43354

    WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

    Критич. 9.8

  • CVE-2023-35096

    WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Высокий 8.8

  • CVE-2026-40794

    WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability

    Средний 6.5

  • CVE-2026-42676

    WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2026-27440

    WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2025-54668

    WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

    Средний 6.5

  • CVE-2024-43353

    WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2024-32711

    WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

    Средний 6.5

  • CVE-2026-17149

    myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripti

    Средний 6.4

  • CVE-2026-8607

    myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Средний 6.4

  • CVE-2026-0550

    myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode

    Средний 6.4

  • CVE-2024-11201

    myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode

    Средний 6.4

  • CVE-2021-25015→ 2.4

    myCred < 2.4 - Reflected Cross-Site Scripting

    Средний 6.1

  • CVE-2017-20008→ 1.7.8

    myCRED < 1.7.8 - Reflected Cross-Site Scripting

    Средний 6.1

  • CVE-2026-61968

    WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability

    Средний 5.4

  • CVE-2024-10187

    myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode

    Средний 5.4

  • CVE-2023-47853

    WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

    Средний 5.4

  • CVE-2025-12362

    myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Ap

    Средний 5.3

  • CVE-2025-54667

    WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

    Средний 5.3

  • CVE-2025-49872

    WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

    Средний 5.3

  • CVE-2024-8658

    myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits fo

    Средний 5.3

  • CVE-2024-43214

    WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

    Средний 5.3

  • CVE-2026-24951

    WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability

    Средний 4.3

  • CVE-2025-12361

    myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure

    Средний 4.3

  • CVE-2025-49857

    WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

    Средний 4.3

← К каталогу