WM
Product
WishList Member X
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add WishList Member X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37113 | 9.8 | Jul 10 | WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability Affected: before 3.26.7 |
| CVE-2024-37112 | 9.8 | Jul 9 | WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability Affected: before 3.26.7 |
| CVE-2026-25445 | 8.8 | Mar 19 | WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability Affected: through 3.29.0 |
| CVE-2024-37109 | 8.8 | Jun 24 | WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability Affected: before 3.26.7 |
| CVE-2024-37107 | 8.8 | Jun 24 | WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability Affected: before 3.26.7 |
| CVE-2024-37110 | 7.5 | Jul 10 | WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability Affected: before 3.26.7 |
| CVE-2024-37111 | 7.5 | Jun 24 | WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability Affected: before 3.26.7 |
| CVE-2026-57384 | 6.5 | Jul 23 | WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability Affected: through 3.32.0 |
Showing 8
