Advisories · Technology
myCred.
Every CVE that names myCred among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
- myCred
- Broken access control
- CVSS 4.3 Medium
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
- myCred
- Broken access control
- CVSS 5.3 Medium
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
- myCred
- Broken access control
- CVSS 4.3 Medium
WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability
- myCred
- Authentication bypass
- CVSS 5.4 Medium
WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability
- myCred
- Broken access control
- CVSS 5.3 Medium
myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED
- myCred
- CWE-345
- CVSS 6.5 Medium
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
- myCred
- Broken access control
- CVSS 6.5 Medium
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
- myCred
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- myCred
- Cross-site request forgery (CSRF)
-
myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure
- myCred
-
myCred < 2.4.4 - Subscriber+ Arbitrary Post Creation
- myCred
-
Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure
- myCred