myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification

Input validation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.4

The myCred plugin for WordPress and WooCommerce, which is used to give loyalty points and rewards, has a security vulnerability. This means that attackers who are logged in and have contributor or hi...

Access violation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.3

The myCred plugin for WordPress and WooCommerce allows users to earn points, ranks, badges, cashback, and credits for gamification. However, a security weakness has been identified in versions up to ...

Input validation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.2

The myCred plugin for WordPress has a security issue that allows attackers to inject harmful code into pages. This can happen when a user with contributor-level access or higher adds a specific attri...

Input validation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.2

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce has a security vulnerability that allows attackers to inject a type of code called a PHP Object. This can happen if the ...

Access violation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.2

The myCred plugin, used for loyalty points and rewards on WordPress and WooCommerce, has a security vulnerability in all versions up to 2.7.2. This allows anyone without proper authentication to acce...

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.6.3

A popular plugin called myCred for WordPress has a security issue where malicious code can be added to certain pages by attackers with a certain level of access. This can potentially harm users who a...

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.6.1

The myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin plugin for WordPress is unsafe and outdated. It has a security vulnerability that could let an attacker with contribut...

Input validation vulnerability in Freemius SDK 2.5.9 (1072 components affected)

The Freemius SDK for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This attack is possible because of insufficient security measures in versions of the Freemius SDK up ...

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.5.1

The myCred plugin for WordPress, a version of which is used up to and including version 2.5, has a security vulnerability. An unauthenticated attacker can potentially modify the plugin's membership k...

Access violation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.4.4

The myCred WordPress plugin before version 2.4.4 did not have any security measures in place to stop people from using it. This means that any user that was logged in

Access violation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.4.3.1

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 1.7.8

The myCred WordPress plugin before version 1.7.8 had a security issue. It did not properly filter what information it showed in the Points Log admin dashboard

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.3.2

Access violation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.4.4

The myCred plugin for WordPress

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.2

Input validation vulnerability in myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.4.6.1

The myCred plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to 2.4.6.1. This means attackers could inject malicious web scripts into pages that would execute if someone click...

Access violation vulnerability in Freemius SDK (620 components affected)

Freemius, a software development kit used by hundreds of WordPress plugin and theme developers, had a security vulnerability in its older versions (up to and including 2.4.2). This vulnerability could...