myCred for Event Espresso 4 Security & Risk Analysis

wordpress.org/plugins/mycred-for-event-espresso-4

📢🚨 Important Notice: myCred for Event Espresso 4 is now part of the myCred Toolkit and will no longer receive updates here.

10 active installs v1.1 PHP 7.0+ WP 4.8+ Updated Apr 17, 2025
bookingsevent-expressoeventspoints
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is myCred for Event Espresso 4 Safe to Use in 2026?

Generally Safe

Score 92/100

myCred for Event Espresso 4 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The plugin "mycred-for-event-espresso-4" version 1.1 exhibits a strong security posture based on the provided static analysis. There are no identified entry points such as AJAX handlers, REST API routes, or shortcodes, which significantly limits the attack surface. The code also demonstrates good security practices by utilizing prepared statements for all SQL queries, properly escaping all output, and avoiding file operations and external HTTP requests. The absence of dangerous functions and taint flows with unsanitized paths further reinforces this positive assessment.

Key Concerns

  • No nonce checks detected
  • No capability checks detected
Vulnerabilities
None known

myCred for Event Espresso 4 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

myCred for Event Espresso 4 Release Timeline

v1.1Current
v1.0.9
v1.0.8
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
Code Analysis
Analyzed Apr 16, 2026

myCred for Event Espresso 4 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Attack Surface

myCred for Event Espresso 4 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
filterplugin_action_linksEE_MyCRED_Payment_Method.class.php:49
actionadmin_noticesmycred-ee.php:100
actionmycred_initmycred-ee.php:103
actionmycred_all_referencesmycred-ee.php:104
actionAHEE__EE_System__load_espresso_addonsmycred-ee.php:105
Maintenance & Trust

myCred for Event Espresso 4 Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedApr 17, 2025
PHP min version7.0
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

myCred for Event Espresso 4 Developer Profile

Saad Iqbal

89 plugins · 1.4M total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
267 days
View full developer profile
Detection Fingerprints

How We Detect myCred for Event Espresso 4

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mycred-for-event-espresso-4/EEG_myCRED_Onsite.gateway.php

HTML / DOM Fingerprints

JS Globals
EE_PMT_myCRED_Onsite
FAQ

Frequently Asked Questions about myCred for Event Espresso 4