Skip to content
OpenAdvisories

Vendor

Membership Software

8 known vulnerabilities.

Membership Software at a glance

Last 12 months
2
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

WishList Member X 8
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.5
    CVE-2026-57384

    WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

    Membership Software WishList Member X
  • High 8.8
    CVE-2026-25445

    WordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.

    Membership Software WishList Member X
  • High 7.5
    CVE-2024-37110

    WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X
  • Critical 9.8
    CVE-2024-37113

    WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X
  • Critical 10.0
    CVE-2024-37112

    WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X
  • High 7.5
    CVE-2024-37111

    WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerability

    Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X
  • Critical 9.9
    CVE-2024-37109

    WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X
  • High 8.8
    CVE-2024-37107

    WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7.

    Membership Software WishList Member X