Log out
Get PRO

Latest

Input validation vulnerability in myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification 2.7.4

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 7, 2024

The myCred plugin for WordPress and WooCommerce, which is used to give loyalty points and rewards, has a security vulnerability. This means that attackers who are logged in and have contributor or higher access can add harmful scripts to certain pages. This can cause these scripts to run when a user visits the page.

Detected in:

myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification fixed vulnerable versions:
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program. fixed vulnerable versions:
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.