CVE Intelligence

myCred myCred vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting myCred myCred: 2 record(s), with affected versions and fixes.

CVE-2026-40794 Medium · 6.5 CWE-862 Jun 15, 2026
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in myCred <= 3.0.3 versions.
CVE-2026-42676 Medium · 6.5 CWE-79 Jun 1, 2026
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4.