<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: mycred</title><description>Every new CVE for mycred.</description><link>https://agentprime.io/</link><item><title>CVE-2026-97072: WordPress myCred plugin &lt;= 4.0.2 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-97072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97072/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 17:02:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103077: WordPress myCred plugin &lt;= 4.0.2 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-103077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103077/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 17:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97073: WordPress myCred plugin &lt;= 4.0.2 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-97073/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97073/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 14:39:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-115962: WordPress myCred plugin &lt;= 4.0.1 - Bypass Vulnerability vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-115962/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115962/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 11:00:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114698: WordPress myCred plugin &lt;= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-114698/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114698/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 07:31:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15150: myCred &lt; 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED</title><link>https://agentprime.io/advisories/CVE-2026-15150/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15150/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 11:40:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40794: WordPress myCred plugin &lt;= 3.0.3 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-40794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40794/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2026 20:18:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42676: WordPress myCred plugin &lt;= 3.0.4 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-42676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42676/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 15:17:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35096: WordPress myCred Plugin &lt;= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)</title><link>https://agentprime.io/advisories/CVE-2023-35096/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35096/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Jul 2023 13:35:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-1092: myCred &lt; 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure</title><link>https://agentprime.io/advisories/CVE-2022-1092/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-1092/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Apr 2022 15:51:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0363: myCred &lt; 2.4.4 - Subscriber+ Arbitrary Post Creation</title><link>https://agentprime.io/advisories/CVE-2022-0363/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0363/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Apr 2022 15:50:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0287: Mycred &lt; 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure</title><link>https://agentprime.io/advisories/CVE-2022-0287/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0287/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Apr 2022 15:50:55 GMT</pubDate><category>CVE</category></item></channel></rss>