WordPress security by component
WishList Member X
Plugin description
WishList Member X is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
wishlist-memberLatest vulnerability
CVE-2026-57384: WishList Member X: Cross-site scripting
WishList Member X is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.32.0.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-57384
WishList Member X: Cross-site scripting
WishList Member X is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.32.0.
|
3.33.0 |
CVE6.5
NVDPending
|
| May 23, 2026 |
CVE-2026-6898
Wishlist Member: A security weakness
Wishlist Member is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.30.1.
|
> 3.30.1 |
CVE8.8
NVDPending
|
| May 23, 2026 |
CVE-2026-6897
Wishlist Member: A security weakness
Wishlist Member is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.30.1.
|
> 3.30.1 |
CVE8.8
NVDPending
|
| May 23, 2026 |
CVE-2026-6895
Wishlist Member: Privilege escalation or authentication bypass
Wishlist Member is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 3.30.1.
|
> 3.30.1 |
CVE8.8
NVDPending
|
| May 23, 2026 |
CVE-2026-6419
Wishlist Member: Privilege escalation or authentication bypass
Wishlist Member is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 3.30.1.
|
> 3.30.1 |
CVE8.8
NVDPending
|