Known vulnerabilities in Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
myCred is a flexible WordPress loyalty points and gamification plugin for points, badges, ranks, referrals, and WooCommerce rewards.
30Reported vulnerabilities
8.8Highest CVSS score
3.2.5Latest version
10,000+Active installs
What to do now
Update Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred to 3.2.5 or later.
30 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2021-24755 | High | 1.3% | Before 2.3 | 2.3 |
November 29, 2021 |
| CVE-2021-25015 | Medium | 0.9% | Before 2.4 | 2.4 |
January 24, 2022 |
| CVE-2017-20008 | Medium | 0.9% | Before 1.7.8 | 1.7.8 |
November 29, 2021 |
| CVE-2022-0287 | Medium | 0.8% | Before 2.4.4.1 | 2.4.4.1 |
April 25, 2022 |
| CVE-2024-43354 | High | 0.5% | 2.7.2 and earlier | 2.7.3 |
August 16, 2024 |
| CVE-2022-1092 | Medium | 0.4% | Before 2.4.4 | 2.4.4 |
April 25, 2022 |
| CVE-2022-0363 | Medium | 0.3% | Before 2.4.3.1 | 2.4.3.1 |
April 25, 2022 |
| CVE-2024-11201 | Medium | 0.8% | 0 to 2.7.5.2 (inclusive) | 2.7.6 |
December 6, 2024 |
| CVE-2026-8607 | Medium | 0.3% | 0 to 3.1 (inclusive) | 3.1.1 |
June 17, 2026 |
| CVE-2024-43353 | Medium | 0.3% | 2.7.2 and earlier | 2.7.3 |
August 16, 2024 |
| CVE-2023-47853 | Medium | 0.4% | 2.6.1 and earlier | 2.6.2 |
November 20, 2023 |
| CVE-2026-42676 | Medium | 0.1% | 3.0.4 and earlier | 3.0.5 |
May 15, 2026 |
| CVE-2026-0550 | Medium | 0.2% | 0 to 2.9.7.3 (inclusive) | 2.9.7.4 |
February 14, 2026 |
| CVE-2026-27440 | Medium | 0.2% | 2.9.7.6 and earlier | 3.0 |
November 8, 2025 |
| CVE-2025-54668 | Medium | 0.2% | 2.9.4.3 and earlier | 2.9.4.4 |
July 30, 2025 |
| WF-01857d1d-4b6c-4ab0-b2ef-6a948daedbe0 | Medium | — | 2.4.6.1 and earlier | 2.4.7 |
June 16, 2022 |
| CVE-2024-10187 | Medium | 0.3% | Before 2.7.5 | 2.7.5 |
November 8, 2024 |
| CVE-2024-32711 | Medium | 0.3% | 2.6.3 and earlier | 2.6.4 |
April 22, 2024 |
| CVE-2026-15150 | Medium | 0.1% | 0 up to (but not including) 3.2.5 | 3.2.5 |
August 21, 2026 |
| CVE-2025-12362 | Medium | 0.3% | 0 to 2.9.7 (inclusive) | 2.9.7.1 |
December 13, 2025 |
| CVE-2025-49872 | Medium | 0.2% | 2.9.4.2 and earlier | 2.9.4.3 |
June 12, 2025 |
| CVE-2024-8658 | Medium | 0.3% | Before 2.7.4 | 2.7.4 |
September 25, 2024 |
| CVE-2024-43214 | Medium | 0.3% | 2.7.2 and earlier | 2.7.3 |
August 9, 2024 |
| CVE-2026-61968 | Medium | 0.3% | 3.1.2 and earlier | 3.2.0 |
July 29, 2026 |
| CVE-2026-40794 | Medium | 0.3% | 3.0.3 and earlier | 3.0.4 |
April 24, 2026 |
| CVE-2026-24951 | Medium | 0.2% | 2.9.7.3 and earlier | 2.9.7.4 |
February 6, 2026 |
| CVE-2025-12361 | Medium | 0.2% | 0 to 2.9.7.1 (inclusive) | 2.9.7.2 |
December 19, 2025 |
| CVE-2025-54667 | Medium | 0.2% | 2.9.4.3 and earlier | 2.9.4.4 |
July 30, 2025 |
| CVE-2025-49857 | Medium | 0.2% | 2.9.4.2 and earlier | 2.9.4.3 |
June 12, 2025 |
| CVE-2023-35096 | Medium | 0.2% | Before 2.5.1 | 2.5.1 |
June 14, 2023 |