Browse all 6 CVE security advisories affecting myCred. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-56013 | WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability — License Manager for WooCommerceCWE-639 | 6.5 | Medium | 2026-06-25 |
| CVE-2026-40794 | WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability — myCredCWE-862 | 6.5 | Medium | 2026-06-15 |
| CVE-2025-69332 | WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability — BookifyCWE-862 | 6.5 | Medium | 2026-06-15 |
| CVE-2026-42676 | WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability — myCredCWE-79 | 6.5 | Medium | 2026-06-01 |
| CVE-2023-47853 | WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS) — myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty PluginCWE-79 | 6.5 | Medium | 2023-11-30 |
| CVE-2023-35096 | WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) — myCredCWE-352 | 5.4 | Medium | 2023-07-17 |
This page lists every published CVE security advisory associated with myCred. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.