https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10187.htmlhttps://patchthecve.com/cve/CVE-2024-10187.htmlWed, 17 Jun 2026 06:55:07 +0000MEDIUM 6.4: The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycred_link shortcode in all versions https://patchthecve.com/cve/CVE-2024-49702.htmlhttps://patchthecve.com/cve/CVE-2024-49702.htmlWed, 17 Jun 2026 08:00:18 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred Elementor mycred-for-elementor allows Stored XSS.This issue affects myCred Elementor: from n/a through <= 1.2.6.https://patchthecve.com/cve/CVE-2024-8658.htmlhttps://patchthecve.com/cve/CVE-2024-8658.htmlWed, 17 Jun 2026 08:23:03 +0000MEDIUM 5.3: The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mycred_u