CVE-2026-97072: WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Q: Who can exploit this issue?

An attacker needs network access and at least low-level privileges. No user interaction is required.

Q: What is the likely security impact?

The provided severity vector indicates an integrity impact only, with no stated confidentiality or availability impact. The issue is rated medium severity with a CVSS score of 4.3.

Q: Which versions are affected?

myCred versions through 4.0.2 are affected. The earliest affected version is not specified.

Published Nov 3, 2026

Updated

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress myCred plugin to a version that resolves this vulnerability.
Fixed in 4.0.3

Event History

Nov 3, 2026

CVE Published

via MITRE·05:02 PM

Data Sourced

via MITRE·05:02 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs network access and at least low-level privileges. No user interaction is required.

What is the likely security impact?

The provided severity vector indicates an integrity impact only, with no stated confidentiality or availability impact. The issue is rated medium severity with a CVSS score of 4.3.

Which versions are affected?

myCred versions through 4.0.2 are affected. The earliest affected version is not specified.

CVE-2026-97072: WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which versions are affected?