myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin, CVE-2026-24951

CVE, Research URL: CVE-2026-24951
Home page URL: Security reports for myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
Application: myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin
Published on: Feb 03, 2026
Research Description: Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3.
Affected versions: max 2.9.7.3.
Status: vulnerable

myCred &#8211; Points, Rewards, Gamification, Ranks, Badges &amp; Loyalty Plugin, CVE-2026-24951