CVE-2025-12362 myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval

The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.9.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This mak...

WordPress GiveWP Cross-Site Scripting Vulnerability

WordPress Foundation GiveWP is WordPress Foundation open source an application system . Provide the functionality of an online donation system . A cross-site scripting vulnerability exists in WordPress GiveWP plugin version 2.9.7, no detailed vulnerability details are available at this time...