Skip to content
PluginCanary

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred

by Saad Iqbal · 10,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 4.0.3.

83/ 100 Canary Score
Sub-scores for Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 4.0.3. Update to version 4.0.3 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 4.0.0. Update to version 4.0.0 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 3.2.5. Update to version 3.2.5 or later.8 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 3.2.5. Update to version 3.2.5 or later.24 Aug 2026Evidence
  • InfoSEC-319 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
designbymerovingi22 Apr 2013 to 13 Dec 2018, 1048 commits
wpexpertsio4 Mar 2019 to 27 Oct 2026, 528 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
52
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred
Q1 20242
Q2 20241
Q3 20245
Q4 20247
Q1 20253
Q2 20255
Q3 20253
Q4 20257
Q1 20266
Q2 20269
Q3 20268
Q4 20264

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

25% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.2 - Missing Authorization5.3<= 4.0.24.0.30
22 Oct 2026Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 4.0.0-beta.1 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 4.0.04.0.00
8 Sep 2026myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute6.4<= 3.2.43.2.50
24 Aug 2026Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.2.5 - Unauthenticated Payment Bypass5.3< 3.2.53.2.50
29 Jul 2026myCred <= 3.1.2 - Missing Authorization4.3<= 3.1.23.2.00
16 Jun 2026myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute6.4<= 3.13.1.10
15 May 2026Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 3.0.43.0.50
24 Apr 2026Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing Authorization4.3<= 3.0.33.0.40
13 Feb 2026myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode6.4<= 2.9.7.32.9.7.40
6 Feb 2026myCred <= 2.9.7.3 - Missing Authorization4.3<= 2.9.7.32.9.7.40
18 Dec 2025myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure4.3<= 2.9.7.12.9.7.20
12 Dec 2025myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval5.3<= 2.9.72.9.7.10
8 Nov 2025myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.9.7.63.0117
30 Jul 2025myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.9.4.32.9.4.40
30 Jul 2025myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition4.3<= 2.9.4.32.9.4.40
12 Jun 2025myCred <= 2.9.4.2 - Missing Authorization4.3<= 2.9.4.22.9.4.30
12 Jun 2025myCred <= 2.9.4.2 - Missing Authorization5.3<= 2.9.4.22.9.4.30
5 Dec 2024myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode6.4<= 2.7.5.22.7.60
7 Nov 2024myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode6.4<= 2.7.42.7.50
24 Sep 2024myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade5.3<= 2.7.32.7.41
16 Aug 2024myCred <= 2.7.2 - Unauthenticated PHP Object Injection8.1<= 2.7.22.7.30
16 Aug 2024myCred <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.7.22.7.30
9 Aug 2024myCred <= 2.7.2 - Unauthenticated Information Exposure5.3<= 2.7.22.7.30
22 Apr 2024myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting5.4<= 2.6.32.6.40
20 Nov 2023myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.6.12.6.216

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred
Q4 20235.0
Q1 20244.5
Q2 20245.0
Q1 20254.0
Q2 20255.0
Q3 20254.8
Q4 20255.0
Q1 20263.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star409
4 star9
3 star10
2 star6
1 star38

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred
4 May 2026558
11 May 20265,185
18 May 20262,189
25 May 20265,637
1 Jun 20261,237
8 Jun 20264,753
15 Jun 20269,324
22 Jun 20261,518
29 Jun 20261,020
6 Jul 20268,641
13 Jul 20262,092
20 Jul 20264,657
27 Jul 20265,737
3 Aug 20262,113
10 Aug 20265,603
17 Aug 20261,225
24 Aug 20265,589
31 Aug 20261,387
7 Sep 20261,208
14 Sep 20261,619
21 Sep 20261,341
28 Sep 20261,548
5 Oct 2026936
12 Oct 2026988
19 Oct 20267,503
26 Oct 20266,692
2 Nov 2026283

Weekly downloads over the last 4 weeks are 15% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Loyalty Points Rewards and Referral for WooCommerce - WPLoyaltyScore 91 · 3,000+Refer A Friend for WooCommerce by WPGensScore 91 · 1,000+MyRewardsScore 89 · 2,000+Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and GamificationScore 85 · 6,000+

Facts

Version4.0.3
AuthorSaad Iqbal
Added22 Apr 2013
Last updated27 Oct 2026
Active installs10,000+
Requires WordPress4.8
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsbadges, points, Loyalty, Rewards, loyalty program

Other plugins by this author: Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Password Protected, Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, All In One Login, Social Preview and Open Graph Tags, Email Templates Customizer and Designer for WordPress and WooCommerce, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, WC Hide Shipping Methods, New User Approve, License Manager for WooCommerce, Gutena Tabs

Questions

Is Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred still maintained?

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred was last updated on 27 Oct 2026. Its Canary status is Healthy.

Is Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred safe?

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred has no open unpatched vulnerabilities on record. 19 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred?

The wordpress.org author is Saad Iqbal. Recent committers: wpexpertsio, designbymerovingi, plugin-master. We have recorded no ownership change.

What can I use instead of Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred?

Plugins in the same category with a higher Canary Score: Loyalty Points Rewards and Referral for WooCommerce - WPLoyalty, Refer A Friend for WooCommerce by WPGens, MyRewards, Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue