Membership Software vulnerabilities and threats

8 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-57384WishList Member X (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-57384 Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. EPSS 0.2%Vulnerability Membership Software CWE-79	CVE Database V5	2026-07-23
High	8.8	EPSS 0.3%	CVE-2026-25445WishList Member X (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.3%2026-03-19CVE Database V5CVE-2026-25445 Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0. EPSS 0.3%Vulnerability Membership Software CWE-502	CVE Database V5	2026-03-19
High	7.5	EPSS 0.6%	CVE-2024-37110WishList Member X (WordPress plugin) · Information Exposure High7.5EPSS 0.6%2024-07-10CVE Database V5CVE-2024-37110 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.6%Vulnerability Membership Software CWE-200	CVE Database V5	2024-07-10
Critical	9.8	EPSS 0.5%	CVE-2024-37113WishList Member X (WordPress plugin) · Information Exposure Critical9.8EPSS 0.5%2024-07-10CVE Database V5CVE-2024-37113 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.5%Vulnerability Membership Software CWE-200	CVE Database V5	2024-07-10
Critical	10.0	EPSS 0.5%	CVE-2024-37112WishList Member X (WordPress plugin) · SQL Injection Critical10.0EPSS 0.5%2024-07-09CVE Database V5CVE-2024-37112 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.5%Vulnerability Membership Software CWE-89	CVE Database V5	2024-07-09
High	7.5	EPSS 0.5%	CVE-2024-37111WishList Member X (WordPress plugin) · Missing Authorization High7.5EPSS 0.5%2024-06-24CVE Database V5CVE-2024-37111 Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.5%Vulnerability Membership Software CWE-862	CVE Database V5	2024-06-24
Critical	9.9	EPSS 0.5%	CVE-2024-37109WishList Member X (WordPress plugin) · Code Injection Critical9.9EPSS 0.5%2024-06-24CVE Database V5CVE-2024-37109 Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.5%Vulnerability Membership Software CWE-94	CVE Database V5	2024-06-24
High	8.8	EPSS 0.4%	CVE-2024-37107WishList Member X (WordPress plugin) · Improper Privilege Management High8.8EPSS 0.4%2024-06-24CVE Database V5CVE-2024-37107 Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7. EPSS 0.4%Vulnerability Membership Software CWE-269	CVE Database V5	2024-06-24

Page 1 of 1