Approved changes feed: RSS · Atom

cpe:2.3:a:membershipsoftware:wishlist_member_x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMembershipsoftware (b429a6bb-7fa7-5be8-aa61-86bb99cfa62c)
ProductWishlist Member X (b8db5c4b-30ef-5dc6-abdd-dfd884f1c145)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37112 vulnerable 2026-06-08 06:39:46.624557 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability
CRITICAL (10)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-07-09T09:07:55.816Z
Updated: 2026-04-28T16:09:56.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37111 vulnerable 2026-06-08 06:39:46.623902 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-06-24T12:31:19.441Z
Updated: 2026-04-28T16:09:56.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37110 vulnerable 2026-06-08 06:39:46.623344 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability
HIGH (7.5)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-07-10T17:58:43.098Z
Updated: 2026-04-28T16:09:56.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37109 vulnerable 2026-06-08 06:39:46.621154 WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability
CRITICAL (9.9)
Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-06-24T12:29:27.380Z
Updated: 2026-04-28T16:09:56.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37107 vulnerable 2026-06-08 06:39:46.618405 WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability
HIGH (8.8)
Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-06-24T12:26:19.400Z
Updated: 2026-04-28T16:09:56.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37106 vulnerable 2026-06-08 06:39:46.617291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.