wishlist_member_x vulnerabilities

5 known vulnerabilities in wishlist_member_x from Membershipsoftware. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  WishList Member X: Missing Authorization

  CVE-2024-37106Nov 1, 2024WishList Products

  Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a through 3.26.6

• 7.5 High severity

  WishList Member X: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-37110Jul 10, 2024Membership Software

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

• 9.8 Critical severity

  WishList Member X: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-37112Jul 9, 2024Membership Software

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.

• 8.8 High severity

  WishList Member X: Improper Control of Generation of Code

  CVE-2024-37109Jun 24, 2024Membership Software

  Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.

• 8.8 High severity

  WishList Member X: Improper Privilege Management

  CVE-2024-37107Jun 24, 2024Membership Software

  Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7.