Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

86 Quality Score

Active Installs

18/30

Popularity scores 60 out of 30 normalized, but raw adoption of 10,000 active installs is modest compared to top alternatives like Side Cart WooCommerce at 80,000, suggesting a niche rather than mainstream audience.

Update Freshness

25/25

Maintenance is a perfect 100, with the plugin updated on July 9, 2026 and tested against WordPress 7.0.1, signalling an actively maintained codebase.

User Rating

14/15

User ratings land at 92 out of 100 across 470 reviews, which is strong and indicates most installers are satisfied with the feature set and stability.

Support Health

15/15

Support health is weak at 50 out of 100, with only 1 of 3 threads resolved (33.3%), so paid or community help may be slow if you hit a tricky issue.

WP Compatibility

15/15

Compatibility is a perfect 100, supporting WordPress 4.8 onward, PHP 7.0 or higher, and the latest 7.0.1 release, so it should run on virtually any current host.

Scores higher than 97% of indexed plugins

About

myCred is a powerful AI-powered WordPress loyalty points and gamification plugin for points, badges, ranks, and WooCommerce rewards.

Active Installs 10k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-22 6:05am GMT

Requires WordPress 4.8+

Tested Up To 7.1.2

Requires PHP 7.0+

Security History

33 known vulnerabilities, all patched

2 High 31 Medium

Most recent: September 8, 2026

View details ▸

myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Medium

September 8, 2026 Patched in ["3.2.5"] CVE-2026-17149

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 3.2.5 - Unauthenticated Payment Bypass Medium

August 24, 2026 Patched in ["3.2.5"] CVE-2026-15150

myCred <= 3.1.2 - Missing Authorization Medium

July 29, 2026 Patched in ["3.2.0"] CVE-2026-61968

myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute Medium

June 16, 2026 Patched in ["3.1.1"] CVE-2026-8607

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

May 15, 2026 Patched in ["3.0.5"] CVE-2026-42676

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing Authorization Medium

April 24, 2026 Patched in ["3.0.4"] CVE-2026-40794

myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode Medium

February 13, 2026 Patched in ["2.9.7.4"] CVE-2026-0550

myCred <= 2.9.7.3 - Missing Authorization Medium

February 6, 2026 Patched in ["2.9.7.4"] CVE-2026-24951

myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure Medium

December 18, 2025 Patched in ["2.9.7.2"] CVE-2025-12361

myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval Medium

December 12, 2025 Patched in ["2.9.7.1"] CVE-2025-12362

myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

November 8, 2025 Patched in ["3.0"] CVE-2026-27440

myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 30, 2025 Patched in ["2.9.4.4"] CVE-2025-54668

myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition Medium

July 30, 2025 Patched in ["2.9.4.4"] CVE-2025-54667

myCred <= 2.9.4.2 - Missing Authorization Medium

June 12, 2025 Patched in ["2.9.4.3"] CVE-2025-49872

myCred <= 2.9.4.2 - Missing Authorization Medium

June 12, 2025 Patched in ["2.9.4.3"] CVE-2025-49857

myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode Medium

December 5, 2024 Patched in ["2.7.6"] CVE-2024-11201

myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode Medium

November 7, 2024 Patched in ["2.7.5"] CVE-2024-10187

myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade Medium

September 24, 2024 Patched in ["2.7.4"] CVE-2024-8658

myCred <= 2.7.2 - Unauthenticated PHP Object Injection High

August 16, 2024 Patched in ["2.7.3"] CVE-2024-43354

myCred <= 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 16, 2024 Patched in ["2.7.3"] CVE-2024-43353

myCred <= 2.7.2 - Unauthenticated Information Exposure Medium

August 9, 2024 Patched in ["2.7.3"] CVE-2024-43214

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

April 22, 2024 Patched in ["2.6.4"] CVE-2024-32711

myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

November 20, 2023 Patched in ["2.6.2"] CVE-2023-47853

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["2.5.3"] CVE-2023-33999

myCred <= 2.5 - Cross-Site Request Forgery Medium

June 14, 2023 Patched in ["2.5.1"] CVE-2023-35096

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting Medium

June 16, 2022 Patched in ["2.4.7"]

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization Medium

April 4, 2022 Patched in ["2.4.3.1"] CVE-2022-0287

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization Medium

March 29, 2022 Patched in ["2.4.4"] CVE-2022-1092

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization Medium

March 29, 2022 Patched in ["2.4.4"] CVE-2022-0363

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["2.4.3.1"] CVE-2022-4974

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.3.2 - Reflected Cross-Site Scripting Medium

December 27, 2021 Patched in ["2.4"] CVE-2021-25015

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection High

November 1, 2021 Patched in ["2.3"] CVE-2021-24755

myCred Plugin <= 1.7.7 - Reflected Cross-Site Scripting Medium

April 20, 2017 Patched in ["1.7.8"] CVE-2017-20008

What It Does

myCred is a WordPress gamification plugin that lets site owners award, deduct, and manage virtual points across their community, with built-in support for ranks, badges, referrals, and WooCommerce-based store rewards. It hooks into user actions like purchases, comments, logins, and content creation to drive repeat engagement and loyalty.

Who It's For

myCred is best for membership sites, online course platforms, and WooCommerce stores that want to run a structured loyalty or rewards program where users earn points for specific actions and redeem them for perks. It also suits community-driven blogs and BuddyPress networks that want to gamify participation and recognize top contributors.

Who Should Skip It

If you run a simple brochure site, a small blog, or a basic store with no plans to build a points economy, myCred is overkill and will add configuration overhead you do not need. Sites already running GamiPress or a dedicated WooCommerce points extension should not stack another gamification layer on top.

The Bottom Line

myCred delivers a genuinely full-featured gamification toolkit with strong ratings, recent updates, and broad compatibility, earning an overall PluginCheck score of 79.21 out of 100. The weak support resolution rate and middling install base are real concerns, so lean toward it only if you are ready to handle some configuration yourself or buy premium add-ons. For most loyalty-driven WooCommerce or membership sites it is a solid pick; for casual users it is more plugin than necessary.

Related Plugins

GamiPress 80/100

Pick GamiPress instead if you want a comparable points, achievements, and ranks system with a larger add-on marketplace and similar install numbers but more flexible event triggers out of the box.

Side Cart Woocommerce | Woocommerce Cart 84/100

Choose Side Cart WooCommerce instead if your only goal is improving the cart experience, since it has 80,000 installs and a higher overall score but does nothing for loyalty or gamification.

Advanced Product Labels for WooCommerce 81/100

Pick Advanced Product Labels for WooCommerce if you just need visual sale or promo badges on product pages rather than a full points program.

Advanced Woo Labels 80/100

Choose Advanced Woo Labels for a lighter, design-focused labelling tool if badges are purely a merchandising concern and you do not need point tracking.

Product Labels For Woocommerce (Sale Badges) 79/100

Pick Product Labels For WooCommerce if you only want simple sale badges and have no plans to introduce a points or rewards system.

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

About

Security History

What It Does

Who It's For

Who Should Skip It

The Bottom Line

Related Plugins

Tags