The myCred plugin for WordPress and WooCommerce allows users to earn points, ranks, badges, cashback, and credits for gamification. However, a security weakness has been identified in versions up to 2.7.3, which could allow unauthorized changes to be made to the database. This means that attackers without proper authentication could potentially upgrade an outdated database.