CVE-2024-8658

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

CVE-2024-8658 myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

CVE-2024-8658

CVE-2024-8658 affects the myCred – Loyalty Points and Rewards plugin for WordPress/WooCommerce (versions up to and including 2.7.3). The issue is a missing capability check in the mycred_update_database() function, allowing unauthenticated attackers to perform an unauthorised database upgrade. Mi...

WordPress myCred plugin <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade vulnerability

Missing Authorization to Unauthenticated Database Upgrade vulnerability discovered by Mika in WordPress Plugin myCred versions = 2.7.3...

WordPress plugin myCred 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress myCred Plugin <= 2.7.3 is vulnerable to Broken Access Control

Software myCred Type Plugin Vulnerable versions = 2.7.3 Fixed in 2.7.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-8658 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 52e7fd723681 Credits Mika Required privilege Unauthenticated...

PT-2024-39157 · WordPress · Mycred

Name of the Vulnerable Software and Affected Versions: myCred – Loyalty Points and Rewards plugin for WordPress versions up to, and including, 2.7.3 Description: The issue allows unauthorized modification of data due to a missing capability check on the mycred update database function. This makes...

CVE-2024-43214

Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43214

Missing Authorization vulnerability in myCred.This issue affects myCred: from n/a through 2.7.2...

CVE-2024-43214 WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43214 WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43214

CVE-2024-43214 concerns a Missing Authorization vulnerability in the WordPress plugin myCred . Public records indicate the issue affects myCred versions up to 2.7.2 (n/a through 2.7.2) and is described as an information exposure/missing authorization problem that could potentially expose data. Th...

WordPress plugin myCred 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-30377 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions 2.6.x through 2.7.2 Description: The issue is related to a Missing Authorization vulnerability in myCred. This vulnerability may expose sensitive data. Users are urged to upgrade to mitigate the risk. Recommendations: For...

CVE-2024-43354

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43354 WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43354

CVE-2024-43354 relates to the WordPress plugin myCred, versions ≤ 2.7.2, with a PHP Object Injection vulnerability caused by untrusted data deserialization. The issue affects the myCred component (WordPress plugin) and is described in multiple connected sources as a deserialization of untrusted d...

CVE-2024-43354 WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

WordPress plugin myCred 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-30522 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions n/a through 2.7.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in myCred. Recommendations: For versions n/a through 2.7.2, update to a version later than 2.7.2 to resolv...