CVE-2026-103077: WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Q: What does an attacker need to exploit this issue?

The attacker needs network access and low-level authenticated privileges. Exploitation is rated low complexity and does not require user interaction.

Q: What is the expected security impact?

The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied vector.

Q: Which myCred versions are identified as affected?

The issue is reported to affect myCred versions through 4.0.2. The available information does not specify the earliest affected version.

Published Nov 3, 2026

Updated

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

Event History

Nov 3, 2026

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs network access and low-level authenticated privileges. Exploitation is rated low complexity and does not require user interaction.

What is the expected security impact?

The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied vector.

Which myCred versions are identified as affected?

The issue is reported to affect myCred versions through 4.0.2. The available information does not specify the earliest affected version.

CVE-2026-103077: WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which myCred versions are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which myCred versions are identified as affected?