What’s Vulnerable › Products
Saad Iqbal myCred vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Saad Iqbal myCred version is affected
Latest Saad Iqbal myCred vulnerabilities
- CVE-2026-97073 — WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-115962 — WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability (CVSS 4.3)
- CVE-2026-114698 — WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4)
- CVE-2026-15150 — myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED (CVSS 5.3)
- CVE-2026-61968 — WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability (CVSS 5.4)
- CVE-2026-40794 — WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-42676 — WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-27440 — WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-24951 — WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2025-54668 — WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-54667 — WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability (CVSS 5.3)
- CVE-2025-49872 — WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability (CVSS 5.3)
- CVE-2025-49857 — WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability (CVSS 4.3)
- CVE-2024-43214 — WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2024-43353 — WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-32711 — WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2023-47853 — WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2023-35096 — WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2022-1092 — myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure (CVSS 4.3)
- CVE-2022-0363 — myCred < 2.4.4 - Subscriber+ Arbitrary Post Creation (CVSS 4.3)
- CVE-2022-0287 — Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure (CVSS 4.3)
- CVE-2021-24755 — myCred < 2.3 - Subscriber+ SQL Injection (CVSS 8.8)