PM
Product
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
5
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17149 | 6.4 | Sep 9 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Affected: through 3.2.4 |
| CVE-2026-8607 | 6.4 | Jun 17 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute Affected: through 3.1 |
| CVE-2026-0550 | 6.4 | Feb 14 | myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode Affected: through 2.9.7.3 |
| CVE-2025-12362 | 5.3 | Dec 13 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval Affected: through 2.9.7 |
| CVE-2025-12361 | 4.3 | Dec 19 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure Affected: through 2.9.7.1 |
Showing 5