Badges Loyalty Plugin (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-01-24. Vendor: Unknown.

CVEs of Badges Loyalty Plugin

• CVE-2021-25015 - CVSS 6.1 (medium), 2022-01-24: The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a…
• CVE-2021-24755 - CVSS 8.8 (high), 2021-11-29: The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection…
• CVE-2017-20008 - CVSS 6.1 (medium), 2021-11-29: The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading…