myCred
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 29, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade
WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure
myCred < 2.4.4 - Subscriber+ Arbitrary Post Creation
Monitor myCred in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.