myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin < 2.5.1 - Cross-Site Request Forgery

2023-07-1800:00:00

wpscan.com

mycred

points

rewards

gamification

ranks

badges

loyalty

csrf

attacks

security

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

27.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.