Wishlistmember

CVE-2024-37111 Jun 24, 13:15 HIGH This Week

Missing Authorization vulnerability in Membership Software WishList Member X.26.7. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2024-37109 Jun 24, 13:15 HIGH This Week

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.26.7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-37107 Jun 24, 13:15 HIGH This Week

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.26.7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.