https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:51:40.691615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282430 EUVD-2026-282430 2026-10-06T01:51:40.747773+00:00 EUVD-2026-282430 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8658 fkie_cve-2024-8658 2026-10-06T01:51:40.747809+00:00

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mycred_update_database() function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to upgrade an out of date database.

 https://cve.radiocsirt.org/vuln/ghsa-qq5m-8wpj-8q6h GHSA-qq5m-8wpj-8q6h 2026-10-06T01:51:40.747846+00:00

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mycred_update_database() function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to upgrade an out of date database.