Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WishList Member X — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in WishList Member X, with AI-generated Chinese analysis, references, and POCs.

Vendor: Membership Software

CVE IDTitleCVSSSeverityPublished
CVE-2026-57384 WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-07-23
CVE-2026-25446 WordPress WishList Member X plugin <= 3.29.0 - Arbitrary File Upload vulnerability CWE-434 9.9 Critical2026-06-17
CVE-2026-24575 WordPress WishList Member X plugin <= 3.29.0 - Broken Access Control vulnerability CWE-862 4.3 Medium2026-06-17
CVE-2026-25445 WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability CWE-502 8.8 High2026-03-19
CVE-2024-37106 WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability CWE-862 8.2 High2024-11-01
CVE-2024-37108 WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability CWE-22 7.7 High2024-11-01
CVE-2024-37110 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability CWE-200 7.5 High2024-07-10
CVE-2024-37113 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability CWE-200 9.8 Critical2024-07-10
CVE-2024-37112 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability CWE-89 10.0 Critical2024-07-09
CVE-2024-37111 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability CWE-862 7.5 High2024-06-24
CVE-2024-37109 WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability CWE-94 9.9 Critical2024-06-24
CVE-2024-37107 WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability CWE-269 8.8 High2024-06-24

All 12 known CVE vulnerabilities affecting WishList Member X with full Chinese analysis, references, and POCs where available.