Medium severity5.4NVD Advisory· Published Jul 13, 2026· Updated Jul 13, 2026
CVE-2026-61968
CVE-2026-61968
Description
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.
Affected products
2<=3.1.2+ 1 more
- (no CPE)range: <=3.1.2
- (no CPE)range: <=3.1.2
Package: https://wordpress.org/plugins/mycred
Patches
Vulnerability mechanics
References
1News mentions
2- Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)Wordfence Blog · Aug 14, 2026
- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 27, 2026 to August 2, 2026)Wordfence Blog · Aug 8, 2026