Wishlistmember

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Wishlistmember records in CISA KEV

No Wishlistmember vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wishlist Member X 2 records MEDIUM Wishlist Member 1 record MEDIUM

Records

3 records

TI-2024-24637 CVE-2024-37109 · GHSA-x6pp-pchx-wvc7

WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability

MEDIUM 44

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00532 Published 2024-06-24 Fixed in 3.26.7 CWE-94

TI-2024-24635 CVE-2024-37107 · GHSA-3prc-c43p-xf25

WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability

MEDIUM 40

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00418 Published 2024-06-24 Fixed in 3.26.7 CWE-269

TI-2024-24639 CVE-2024-37111 · GHSA-525f-5rpg-r2mg

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability

LOW 39

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00456 Published 2024-06-24 Fixed in 3.26.7 CWE-862

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0