Vulnerabilities

TI-2024-24638 CVE-2024-37110 · GHSA-m573-gr53-3hw7

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-07-10 Fixed in 3.26.7 CWE-200

TI-2024-24641 CVE-2024-37113 · GHSA-jxxv-pfm8-7r47

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

MEDIUM 50

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00542 Published 2024-07-10 Fixed in 3.26.7 CWE-200

Vulnerabilities

Filters

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability