Wishlist Member vulnerabilities
Products
- Member 5
Newest
- wishlist member coursecure coursesCourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint8.8 High
- wishlist member memberWishlist Member X <= 3.34.1 - Unauthenticated Account Takeover via 'mergewith' Parameter9.8 Critical
- membership software wishlist member x, wishlist member x +1 moreWordPress WishList Member X plugin <= 3.29.0 - Broken Access Control vulnerability4.3 Medium
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action8.8 High
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action8.8 High
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action8.8 High
- wishlist member memberWishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action8.8 High