Log in Start free

myCred

Products

ProductCVEsExploitedLatest
myCred9–Nov 6, 2026
Bookify1–Jun 15, 2026
License Manager for WooCommerce1–Jun 25, 2026
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin1–Nov 30, 2023
New User Approve1–Aug 20, 2026

Exploited and recent CVEs

  • CVE-2026-123471 Medium 4.3 WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability –
  • CVE-2026-97072 Medium 4.3 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103077 Medium 4.3 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97073 Medium 5.3 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-115962 Medium 4.3 WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-114698 Medium 5.4 WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-28163 Medium 5.3 WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-56013 Medium 6.5 WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-40794 Medium 6.5 WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69332 Medium 6.5 WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-42676 Medium 6.5 WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2023-47853 Medium 6.5 WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-35096 Medium 5.4 WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%