VYPR

by Wpexperts

CVEs (3)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2023-47853Med0.426.50.00Nov 30, 2023Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin allows Stored XSS.This issue affects myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin: from n/a through 2.6.1.
CVE-2023-35096Med0.426.50.00Jul 17, 2023Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.
CVE-2024-43214Med0.345.30.00Aug 26, 2024Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.