Advisories · Technology
saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred.
Every CVE that names saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Broken access control
- CVSS 5.3 Medium
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Broken access control
- CVSS 6.4 Medium
myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Autho…
- saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- Broken access control