This vulnerability (CVE-2024-37110) in WishList Member X involves the exposure of sensitive information to unauthorized actors, classified under CWE-200. It affects versions prior to 3.26.7 and can be exploited remotely without authentication or user interaction. The CVSS 3.1 vector indicates the attack vector is network-based with low attack complexity and no privileges required, leading to a high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

An attacker can remotely access sensitive information without any privileges or user interaction, potentially leading to data leakage. The impact is limited to confidentiality, with no direct effect on integrity or availability. This could compromise sensitive user or system data managed by the WishList Member X software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor for updates from the vendor and consider limiting network exposure of the affected software where possible.