Skip to content
OpenAdvisories

Product · Saad Iqbal

myCred

11 known vulnerabilities.

10 results · Clear filters · Feed

  • Medium 5.4

    WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.

  • Medium 6.5

    WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6.

  • Medium 4.3

    WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3.

  • Medium 6.5

    WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.4.3.

  • Medium 5.3

    WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

    Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.This issue affects myCred: from n/a through <= 2.9.4.3.

  • Medium 4.3

    WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.4.2.

  • Medium 5.3

    WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through <= 2.9.4.2.

  • Medium 5.3

    WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.

  • Medium 6.5

    WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.

  • Medium 6.5

    WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.6.3.