myCred — Vulnerabilities & Security Advisories 18

This page aggregates vulnerability data for myCred, a popular points and reward system plugin for WordPress, focusing on specific weakness types and security tags. It collects a variety of reported security flaws, including cross-site scripting, insecure direct object references, and permission misconfigurations, covering incidents disclosed from 2016 to the present. Readers can utilize this resource to track the vendor's advisory patterns over time, understand the specific characteristics of common weakness classes affecting this ecosystem, or review the complete vulnerability history associated with the product to assess its long-term security posture. By centralizing these entries, the page provides a factual overview of how security issues have been identified and addressed within the myCred codebase. The data serves as a reference for security professionals and system administrators who need to evaluate the risk profile of this component within their WordPress installations. This aggregation facilitates a broader understanding of the threat landscape without requiring navigation through disparate individual bulletin pages. The focus remains strictly on historical data collection and classification, offering a clear view of the product's security track record and the evolution of its vulnerabilities across various versions.