Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. 2.9.7.6

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 8, 2025

The myCred plugin for WordPress, which is used for managing points and rewards in games and loyalty programs, has a security issue. This means that hackers can inject harmful code into the plugin, which could potentially harm users who access the affected pages. The vulnerability exists in versions up to 2.9.7.6 and can be exploited by attackers with contributor-level access or higher.

Detected in:

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.