Approved changes feed: RSS · Atom

cpe:2.3:a:membership_software:wishlist_member_x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMembership Software (11130637-65ee-51cb-963c-9b4efbcc7caf)
ProductWishlist Member X (dae2d9a4-e3f7-5f29-b9f5-007e824fd9a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57384 vulnerable 2026-07-29 01:00:29.710880 WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.
Published: 2026-07-23T11:18:02.227Z
Updated: 2026-07-23T14:53:41.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25445 vulnerable 2026-06-08 07:53:19.814509 WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.
Published: 2026-03-19T08:37:53.763Z
Updated: 2026-04-28T16:14:59.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37113 vulnerable 2026-06-08 06:39:46.628225 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability
CRITICAL (9.8)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-07-10T17:57:18.910Z
Updated: 2026-04-28T16:09:56.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37112 vulnerable 2026-06-08 06:39:46.624700 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability
CRITICAL (10)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-07-09T09:07:55.816Z
Updated: 2026-04-28T16:09:56.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37111 vulnerable 2026-06-08 06:39:46.624056 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Published: 2024-06-24T12:31:19.441Z
Updated: 2026-04-28T16:09:56.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37110 vulnerable 2026-06-08 06:39:46.623500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37109 vulnerable 2026-06-08 06:39:46.621206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37107 vulnerable 2026-06-08 06:39:46.619526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.