myCred vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MY

Product

myCred

by Saad Iqbal · last CVE Jul 13, 2026

11

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 0Medium 10Low 0

Severity

All severities11 Critical1 High0 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add myCred to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-43354	9.8	1%	Aug 19	WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability Affected: through 2.7.2
CVE-2026-27440	6.5	0%	Feb 19	WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability Affected: through 2.9.7.6
CVE-2025-54668	6.5	0%	Aug 14	WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 2.9.4.3
CVE-2024-43353	6.5	0%	Aug 18	WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.7.2
CVE-2024-32711	6.5	0%	Apr 24	WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability Affected: through 2.6.3
CVE-2026-61968	5.4	0%	Jul 13	WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability Affected: through 3.1.2
CVE-2025-54667	5.3	0%	Aug 14	WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability Affected: through 2.9.4.3
CVE-2025-49872	5.3	0%	Jun 17	WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability Affected: through 2.9.4.2
CVE-2024-43214	5.3	0%	Aug 26	WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability Affected: through 2.7.2
CVE-2026-24951	4.3	0%	Feb 3	WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability Affected: through 2.9.7.3
CVE-2025-49857	4.3	0%	Jun 17	WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability Affected: through 2.9.4.2