Membership Software

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Membership Software records in CISA KEV

No Membership Software vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-24641 CVE-2024-37113 · GHSA-jxxv-pfm8-7r47

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

MEDIUM 50

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00542 Published 2024-07-10 Fixed in 3.26.7 CWE-200

TI-2026-20559 CVE-2026-25445 · GHSA-j5c5-2p8w-cq4f

WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability

MEDIUM 40

Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00313 Published 2026-03-19 No fix listed CWE-502

TI-2024-24638 CVE-2024-37110 · GHSA-m573-gr53-3hw7

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-07-10 Fixed in 3.26.7 CWE-200

TI-2026-41321 CVE-2026-57384 · GHSA-35q4-rjfj-7r6x

WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-23 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0