cleantalk
Vulnerabilities and Security Researches

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin, CVE-2024-43354

CVE, Research URL

CVE-2024-43354

Published on
Aug 20, 2024
Research Description
Deserialization of Untrusted Data vulnerability in myCred allows Object Injection.This issue affects myCred: from n/a through 2.7.2.
Affected versions
Min -, max 2.7.3.
Status
vulnerable