membershipsoftware records

2 published records for vendor membershipsoftware.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2024-37106No exploit	WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerabilitywishlist products · wishlist member x · CWE-862 Pre-auth Broken access control (IDOR) XSS	High8.2	—	0.3%	Nov 1, 2024
30Monitor	CVE-2024-37110No exploit	WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerabilitymembership software · wishlist member x · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Jul 10, 2024

CVE-2024-37106
32Monitor
WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability
HighCVSS 8.2No exploitEPSS 0%
wishlist products · wishlist member xNov 1, 2024
CVE-2024-37110
30Monitor
WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
membership software · wishlist member xJul 10, 2024