424 matches found
CVE-2026-125810
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125811
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in myCred myCred mycred allows Blind SQL Injection.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125809
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred myCred mycred allows Stored XSS.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125811 WordPress myCred plugin <= 4.0.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in myCred myCred mycred allows Blind SQL Injection.This issue affects myCred: from n/a through 4.0.2...
EUVD-2026-125368
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in myCred myCred mycred allows Blind SQL Injection.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125811
The myCred WordPress plugin (versions 4.0.2 and below ) is vulnerable to a Blind SQL Injection flaw caused by the improper neutralization of special elements used in SQL commands. An attacker could potentially exploit this to interact with the underlying database. No specific exploit links or rem...
CVE-2026-125810 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125810
The myCred WordPress plugin (versions
EUVD-2026-125367
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125809
The myCred WordPress plugin (versions
CVE-2026-125809 WordPress myCred plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred myCred mycred allows Stored XSS.This issue affects myCred: from n/a through 4.0.2...
EUVD-2026-125366
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred myCred mycred allows Stored XSS.This issue affects myCred: from n/a through 4.0.2...
WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzaku in WordPress Plugin myCred versions = 4.0.2...
WordPress myCred plugin <= 4.0.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dzaku in WordPress Plugin myCred versions = 4.0.2...
WordPress myCred plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin myCred versions = 4.0.2...
CVE-2026-125778
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2...
EUVD-2026-123421
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125778 WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-125778
The myCred WordPress plugin (versions $\le$ 4.0.2 ) is vulnerable to a Basic Cross-Site Scripting (XSS) flaw due to the improper neutralization of script-related HTML tags in a web page. This vulnerability allows for Code Injection , potentially impacting the integrity of the web application. Spe...