cleantalk
Vulnerabilities and Security Researches

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin, CVE-2025-49857

CVE, Research URL

CVE-2025-49857

Home page URL

Security reports for myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin

Application

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin

Published on
Jun 17, 2025
Research Description
Missing Authorization vulnerability in WPExperts.io myCred allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects myCred: from n/a through 2.9.4.2.
Affected versions
Min -, max 2.9.4.3.
Status
vulnerable
Previous vulnerability researches
Ivory Search – WordPress Search Plugin (CVE-2022-4974) , Nov 15, 2024
Ivory Search – WordPress Search Plugin (CVE-2021-36869) , Jun 06, 2024
Ivory Search – WordPress Search Plugin (CVE-2021-24234) , Jun 06, 2024
Ivory Search – WordPress Search Plugin (CVE-2024-3233) , Jun 06, 2024
Ivory Search – WordPress Search Plugin (CVE-2021-25105) , Jun 06, 2024
New vulnerability
Responsive Starter Templates – Elementor & WordPress Templates (CVE-2025-49856) , Jun 19, 2025
WP VR – 360 Panorama and Virtual Tour Builder For WordPress (CVE-2025-47452) , Jun 19, 2025
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin (CVE-2025-49872) , Jun 19, 2025
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin (CVE-2025-49857) , Jun 19, 2025
WP Dummy Content Generator (CVE-2025-49234) , Jun 19, 2025