EUVD-2025-24724

Malicious code in bioql PyPI...

CVE-2025-54667

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54668

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54667

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54668

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54668 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54668

CVE-2025-54668: Stored XSS in WordPress plugin myCred up to version 2.9.4.3 due to improper input neutralization during web page generation. Affected software: myCred (WordPress plugin). Impact is stated as Stored Cross-Site Scripting with low to moderate severity (CVSS v3.1 base score 6.5). Reme...

CVE-2025-54668 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...

CVE-2025-54667 WordPress myCred Plugin plugin <= 2.9.4.3 - Race Condition Vulnerability

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects myCred: from n/a through 2.9.4.3...

CVE-2025-54667

CVE-2025-54667 describes a TOCTOU race condition in WordPress plugin myCred up to version 2.9.4.3. The vulnerability (CVSSv3.1: 5.3, Network/Low/No user interaction) affects myCred and can enable a race condition exploit related to TOCTOU in the plugin. Remediation per connected sources is to upd...

CVE-2025-54667 WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...

PT-2025-33222 · WordPress · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions through 2.9.4.3 Description: The software contains an improper neutralization of input during web page generation, leading to a stored cross-site scripting issue. Recommendations: Update myCred to a version later than 2.9.4.3...

WordPress plugin myCred 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

WordPress plugin myCred 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33221 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions through 2.9.4.3 Description: A Time-of-check Time-of-use TOCTOU race condition exists in myCred. This issue allows leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. Recommendations: Update myCred to a version...

WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin myCred versions = 2.9.4.3...

WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability

Race Condition Vulnerability discovered by Esteban Montes Morales in WordPress Plugin myCred versions = 2.9.4.3...

CVE-2025-49872

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through = 2.9.4.2...

CVE-2025-49857

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through = 2.9.4.2...

CVE-2025-49872

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through = 2.9.4.2...