WordPress is a set of blogging platform developed using the PHP language. myCred 2.4.4, a WordPress plugin, previously had an authorization issue vulnerability, which stems from the pluginβs failure to perform any authorization and CSRF checks in the myCred toolβs import and export AJAX operations, which could be exploited by an attacker to invoke and import mycred settings to create badges, admin points or create arbitrary posts.