CVE Intelligence

Saad Iqbal myCred vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Saad Iqbal myCred: 3 record(s), with affected versions and fixes.

CVE-2026-61968 Medium · 5.4 CWE-862 Jul 13, 2026
WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.
CVE-2026-27440 Medium · 6.5 CWE-79 Feb 19, 2026
WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6.
CVE-2026-24951 Medium · 4.3 CWE-862 Feb 3, 2026
WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3.