Vulnerabilities

TI-2026-41321 CVE-2026-57384 · GHSA-35q4-rjfj-7r6x

WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-23 No fix listed CWE-79

TI-2026-20559 CVE-2026-25445 · GHSA-j5c5-2p8w-cq4f

WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability

MEDIUM 40

Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00313 Published 2026-03-19 No fix listed CWE-502

TI-2024-24638 CVE-2024-37110 · GHSA-m573-gr53-3hw7

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-07-10 Fixed in 3.26.7 CWE-200

TI-2024-24641 CVE-2024-37113 · GHSA-jxxv-pfm8-7r47

WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

MEDIUM 50