Non notée
CVE-2022-1092 The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export…
Description
The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowing any authenticated user to call and and retrieve the list of email address present in the blog
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| myCred 2.4 | premières → < 2.4.3.1 | 2.4.3.1 |
Autres CVE de myCred
Les 4 CVE de myCred →
CVE-2026-15150
The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification…
5.3
Moyenne
CVE-2022-0363
The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the…
Non notée
CVE-2022-0287
The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX…
Non notée