Vulnerabilities / myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program vulnerabilities
Advisories WPSec published for Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred. Other sources may list more. Its attack surface: myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1453 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Trashing via 'buycred-cancel' Parameter | Medium 5.4 | 4.0.0 |
License: CC BY 4.0