Known Vulnerabilities for products from Mycred
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Mycred".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-27440 json | Not Provided | 2026-02-19 | 2026-04-01 | |
| CVE-2025-54668 json | Not Provided | 2025-08-14 | 2026-04-01 | |
| CVE-2025-54667 json | Not Provided | 2025-08-14 | 2026-04-01 | |
| CVE-2025-49872 json | Not Provided | 2025-06-17 | 2026-04-01 | |
| CVE-2025-49857 json | Not Provided | 2025-06-17 | 2026-04-01 | |
| CVE-2024-49702 json | Not Provided | 2024-10-24 | 2026-04-01 | |
| CVE-2024-43354 json | Not Provided | 2024-08-19 | 2026-04-01 | |
| CVE-2024-43353 json | Not Provided | 2024-08-18 | 2026-04-01 | |
| CVE-2024-43214 json | Not Provided | 2024-08-26 | 2026-04-01 | |
| CVE-2024-32711 json | Not Provided | 2024-04-24 | 2026-04-01 | |
| CVE-2023-47853 json | 5.4 - MEDIUM | 2023-11-30 | 2023-12-06 | |
| CVE-2023-35096 json | Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions. | 8.8 - HIGH | 2023-07-17 | 2023-07-26 |
| CVE-2022-1092 json | The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX... | 4.3 - MEDIUM | 2022-04-25 | 2023-11-07 |
| CVE-2022-0363 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 4.3 - MEDIUM | 2022-04-25 | 2023-11-07 |
| CVE-2022-0287 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 4.3 - MEDIUM | 2022-04-25 | 2023-11-07 |
| CVE-2021-25015 json | The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history... | 6.1 - MEDIUM | 2022-01-24 | 2022-01-28 |
| CVE-2021-24755 json | The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, l... | 8.8 - HIGH | 2021-11-29 | 2021-11-29 |
| CVE-2017-20008 json | The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Poi... | 6.1 - MEDIUM | 2021-11-29 | 2021-11-29 |