PM
Product
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
8
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 8Low 0
Watch
Add Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17149 | 6.4 | Sep 9 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Affected: through 3.2.4 |
| CVE-2026-8607 | 6.4 | Jun 17 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute Affected: through 3.1 |
| CVE-2026-0550 | 6.4 | Feb 14 | myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode Affected: through 2.9.7.3 |
| CVE-2024-11201 | 6.4 | Dec 6 | myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode Affected: through 2.7.5.2 |
| CVE-2024-10187 | 5.4 | Nov 8 | myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode Affected: through 2.7.4 |
| CVE-2025-12362 | 5.3 | Dec 13 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval Affected: through 2.9.7 |
| CVE-2024-8658 | 5.3 | Sep 25 | myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade Affected: through 2.7.3 |
| CVE-2025-12361 | 4.3 | Dec 19 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure Affected: through 2.9.7.1 |
Showing 8