Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: WishList Products Clear all filters
TI-2024-24634 CVE-2024-37106 · GHSA-xm6v-h562-fh85

WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability

Priority MEDIUM 42

Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a through 3.26.6

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00361 Published 2024-11-01 No fix listed CWE-862
TI-2024-24636 CVE-2024-37108 · GHSA-3f4r-9c59-8g2q

WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability

Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/a through 3.26.6.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00619 Published 2024-11-01 No fix listed CWE-22