EUVD-2026-36997

Subscriber Broken Access Control in myCred = 3.0.3 versions...

PT-2026-6221

Name of the Vulnerable Software and Affected Versions myCred versions through 2.9.7.3 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. The issue allows for exploitation of access control. Recommendations Update myCre...

CVE-2024-43353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

myCred < 2.4 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/users.php?page=mycreddefault-history&s=%3Cimg+src+onerror%3Dalert%28/XSS/%29%3E...