How many WPExperts mycred CVEs are in CISA KEV?

None of WPExperts mycred's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WPExperts mycred are affected?

11 distinct WPExperts mycred versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WPExperts mycred CVEs?

WPExperts mycred's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

What is the average severity of WPExperts mycred CVEs?

The average CVSS base score across WPExperts mycred's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WPExperts

7 CVEs

WPExperts mycred Vulnerabilities

Name: WPExperts mycred vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for mycred by WPExperts.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

6.0

Avg CVSS

2021–2024

Last updated August 26, 2024

Overview

WPExperts mycred has 7 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WPExperts mycred, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WPExperts mycred's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WPExperts mycred's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of WPExperts mycred's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every WPExperts mycred version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.31 CVE
< 2.4.3.11 CVE
< 2.4.41 CVE
< 2.4.4.11 CVE
<= 2.5.11 CVE
<= 2.6.11 CVE
<= 2.7.31 CVE

Fixed in

2.31 CVE
2.4.3.11 CVE
2.4.41 CVE
2.4.4.11 CVE

Find a version

7 CVEs

Sort

WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability
CVE-2024-43214
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (18th pct)2024-08-26
WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47853
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (31th pct)2023-11-30
WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-35096
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (16th pct)2023-07-17
Medium vulnerability · 2022-04-25
CVE-2022-1092
Public exploit
Patch
Medium · CVSS 4.3
EPSS 0.4% (35th pct)2022-04-25
Medium vulnerability · 2022-04-25
CVE-2022-0363
Public exploit
Patch
Medium · CVSS 4.3
EPSS 0.3% (26th pct)2022-04-25
Medium vulnerability · 2022-04-25
CVE-2022-0287
Public exploit
Patch
Medium · CVSS 4.3
EPSS 0.8% (52th pct)2022-04-25
High vulnerability · 2021-11-29
CVE-2021-24755
Patch
CWE-89
High · CVSS 8.8
EPSS 1.3% (68th pct)2021-11-29

Common weakness types

The CWE weakness categories most often found in WPExperts mycred CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WPExperts mycred CVEs were published each year.

2021

1

2022

3

2023

2

2024

1

Other WPExperts products

Browse vulnerabilities for other products by WPExperts.

post smtp21 CVEs post-smtp18 CVEs WP Multistore Locator4 CVEs wp multi store locator3 CVEs all in one login2 CVEs license manager for woocommerce2 CVEs new user approve2 CVEs password protected2 CVEs

All WPExperts vulnerabilities

Frequently asked questions

Common questions about WPExperts mycred vulnerabilities.

How many CVEs does WPExperts mycred have?: WPExperts mycred has 7 published CVE records since 2021.
How many WPExperts mycred CVEs are in CISA KEV?: None of WPExperts mycred's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WPExperts mycred vulnerabilities?: Yes — 3 of WPExperts mycred's CVEs have a known public exploit.
Which versions of WPExperts mycred are affected?: 11 distinct WPExperts mycred versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WPExperts mycred CVEs?: WPExperts mycred's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
What is the average severity of WPExperts mycred CVEs?: The average CVSS base score across WPExperts mycred's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WPExperts mycred vulnerabilities

Monitor new WPExperts mycred vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing