https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10187.htmlhttps://patchthecve.com/cve/CVE-2024-10187.htmlWed, 17 Jun 2026 06:55:07 +0000MEDIUM 6.4: The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycred_link shortcode in all versions https://patchthecve.com/cve/CVE-2024-8658.htmlhttps://patchthecve.com/cve/CVE-2024-8658.htmlWed, 17 Jun 2026 08:23:03 +0000MEDIUM 5.3: The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mycred_uhttps://patchthecve.com/cve/CVE-2024-43214.htmlhttps://patchthecve.com/cve/CVE-2024-43214.htmlWed, 17 Jun 2026 07:50:36 +0000MEDIUM 5.3: Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.