Login Request a demo
MY
Product
myCred
by myCred · last CVE Oct 29, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 1Medium 10Low 0
Severity
All severities12Critical1High1Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add myCred to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40794
6.5
0%
Jun 15
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
Affected: through 3.0.3
CVE-2026-42676
6.5
0%
Jun 1
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.0.4
CVE-2021-25015
6.1
1%
Jan 24
myCred < 2.4 - Reflected Cross-Site Scripting
Affected: before 2.4
CVE-2017-20008
6.1
1%
Nov 29
myCRED < 1.7.8 - Reflected Cross-Site Scripting
Affected: before 1.7.8
CVE-2026-114698
5.4
0%
Oct 22
WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 4.0.0-beta.1
CVE-2024-10187
5.4
0%
Nov 8
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Affected: before 2.7.5
CVE-2026-97073
New
5.3
0%
Oct 29
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Affected: through 4.0.2
CVE-2024-8658
5.3
0%
Sep 25
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade
Affected: before 2.7.4
CVE-2024-43214
5.3
0%
Aug 26
WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability
Affected: through 2.7.2
CVE-2026-115962
New
4.3
0%
Oct 29
WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability
Affected: through 4.0.1
Showing 10