All packages
WishList Member X vulnerabilities
3 known CVE vulnerabilities in WishList Member X, translated and rated.
- CVE-2026-57384Medium
WishList Member X plugin version 3.32.0 and earlier is vulnerable to Cross Site Scripting (XSS) from a subscriber level. A subscriber can inject malicious script.
- CVE-2026-24575Medium
There is a broken access control issue in WishList Member X versions up to 3.29.0 that may allow unauthorized access to subscribers.
- CVE-2026-25446Critical
In WishList Member X versions up to 3.29.0, there is a vulnerability that allows subscribers to upload arbitrary files.