Skip to content
OpenAdvisories

Vendor

myCred

18 known vulnerabilities.

Products

myCred 14 Bookify 1 License Manager for WooCommerce 1 myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 1 New User Approve 1
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-125778

    WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 5.3
    CVE-2026-123462

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 4.3
    CVE-2026-122668

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 5.3
    CVE-2026-124274

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 4.3
    CVE-2026-123471

    WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 4.3
    CVE-2026-97072

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 4.3
    CVE-2026-103077

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 5.3
    CVE-2026-97073

    WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

    myCred myCred
  • Medium 4.3
    CVE-2026-115962

    WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability

    Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCred: from n/a through 4.0.1.

    myCred myCred
  • Medium 5.4
    CVE-2026-114698

    WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.0-beta.1.

    myCred myCred
  • Medium 5.3
    CVE-2026-28163

    WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8.

    myCred New User Approve
  • Medium 6.5
    CVE-2026-56013

    WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.

    myCred License Manager for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-40794

    WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability

    Subscriber Broken Access Control in myCred <= 3.0.3 versions.

    myCred myCred
  • Medium 6.5
    CVE-2025-69332

    WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Bookify <= 1.1.1 versions.

    myCred Bookify
  • Medium 6.5
    CVE-2026-42676

    WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4.

    myCred myCred
  • Medium 6.5
    CVE-2023-47853

    WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin allows Stored XSS.This issue affects myCred – Points, Rewards, Gamification, Ra…

    myCred myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
  • Medium 5.4
    CVE-2023-35096

    WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.

    myCred myCred