Skip to main content

Myrewards

1 CVEs product

Monthly

CVE-2026-40786 Apr 15, 10:21 MEDIUM This Month

Authenticated low-privilege users can modify settings in the MyRewards WordPress plugin through missing authorization checks, leading to limited integrity impact. Affected versions are up to 5.7.3. No active exploitation or public exploit code is known.

WordPress Authentication Bypass Myrewards Wordpress Plugin
NVD VulDB
CVSS 3.1
4.3
EPSS
0.0%
EPSS 0% CVSS 4.3
MEDIUM This Month

Authenticated low-privilege users can modify settings in the MyRewards WordPress plugin through missing authorization checks, leading to limited integrity impact. Affected versions are up to 5.7.3. No active exploitation or public exploit code is known.

WordPress Authentication Bypass Myrewards +1
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy