Wishlist Member

6 CVEs across 2 Wishlist Member products. Browse Wishlist Member vulnerabilities, severities, and proof-of-concept exploits.

Wishlist Member products with known CVEs

ProductCVEs
Wishlist Member5
Wishlist Member X1
Wishlist Member CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-12949Critical9.82026-08-14The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3…
CVE-2026-24575Medium4.32026-06-17Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions.
CVE-2026-6898High8.82026-05-23The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3_Hooks::ge…
CVE-2026-6897High8.82026-05-23The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\T…
CVE-2026-6895High8.82026-05-23The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclosure and Privilege Escalation in version…
CVE-2026-6419High8.82026-05-23The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1. This is due to…