CVE-2021-24755 | BDVDB-2026-164921 Detail

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin

Description#

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/01419d03-54d6-413d-9a67-64c63c26d741

Exploit#

No public exploit known

History#

Version 12021-11-29Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.