Unrated severityNVD Advisory· Published Jul 13, 2026· Updated Jul 13, 2026
WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability
CVE-2026-61968
Description
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.
Affected products
2<=3.1.2+ 1 more
- (no CPE)range: <=3.1.2
- (no CPE)range: <=3.1.2
Package: https://wordpress.org/plugins/mycred
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.