myCred has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 4.3 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-862 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-114698Medium· 5.4WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability30CVE-2026-97073Medium· 5.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability29CVE-2026-97072Medium· 4.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability24CVE-2026-103077Medium· 4.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability24CVE-2026-115962Medium· 4.3WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability24
myCred vulnerabilities
CVEs affecting myCred, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-103077Medium· 4.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-97072Medium· 4.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-97073Medium· 5.3WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-115962Medium· 4.3WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability
Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCred: from n/a through 4.0.1.
CVE-2026-114698Medium· 5.4WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.0-beta.1.