CVE Intelligence

Vulnerabilidades de myCred

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de myCred: 4 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-56013 Média · 6.5 CWE-639 25/06/2026
WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.
CVE-2026-40794 Média · 6.5 CWE-862 15/06/2026
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in myCred <= 3.0.3 versions.
CVE-2025-69332 Média · 6.5 CWE-862 15/06/2026
WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Bookify <= 1.1.1 versions.
CVE-2026-42676 Média · 6.5 CWE-79 01/06/2026
WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred allows Stored XSS. This issue affects myCred: from n/a through 3.0.4.