MY
Vendor
myCred
17
CVEs
0
On KEV
3
New 30D
Products
MY9.8
myCred
myCred
12 CVEs0 on KEV3 new
BO6.5
Bookify
myCred
1 CVEs0 on KEV0 new
LM6.5
License Manager for WooCommerce
myCred
1 CVEs0 on KEV0 new
ME5.4
Mycred Elementor
Mycred
1 CVEs0 on KEV0 new
MP5.4
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
myCred
1 CVEs0 on KEV0 new
NU5.3
New User Approve
myCred
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97073 New | MY myCred myCred | 5.3 | Oct 29 | WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability |
| CVE-2026-115962 New | MY myCred myCred | 4.3 | Oct 29 | WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability |
| CVE-2026-114698 | MY myCred myCred | 5.4 | Oct 22 | WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-28163 | NU New User Approve myCred | 5.3 | Aug 20 | WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability |
| CVE-2026-56013 | LM License Manager for WooCommerce myCred | 6.5 | Jun 25 | WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-40794 | MY myCred myCred | 6.5 | Jun 15 | WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability |
| CVE-2025-69332 | BO Bookify myCred | 6.5 | Jun 15 | WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability |
| CVE-2026-42676 | MY myCred myCred | 6.5 | Jun 1 | WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-10187 | MY Mycred Mycred | 5.4 | Nov 8 | myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode |
| CVE-2024-49702 | ME Mycred Elementor Mycred | 5.4 | Oct 24 | WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-8658 | MY Mycred Mycred | 5.3 | Sep 25 | myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade |
| CVE-2024-43214 | MY Mycred Mycred | 5.3 | Aug 26 | WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability |
| CVE-2024-43354 | MY Mycred Mycred | 9.8 | Aug 19 | WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability |
| CVE-2023-47853 | MP myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin myCred | 5.4 | Nov 30 | WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-35096 | MY myCred myCred | 8.8 | Jul 17 | WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2021-25015 | MY Mycred Mycred | 6.1 | Jan 24 | The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site… |
| CVE-2017-20008 | MY Mycred Mycred | 6.1 | Nov 29 | The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected… |