Vulnerabilidades en Membership Software
8 resultadosAnálisis Vexday
Membership Software apresenta 8 vulnerabilidades catalogadas, sendo 3 críticas, com fraqueza dominante em exposição de informações (CWE-200). Nenhuma está sob ataque ativo conhecido, reduzindo o risco imediato, mas apenas 1 publicação recente (últimos 90 dias) sugere que o monitoramento contínuo permanece necessário.
CVE-2024-37110HIGHWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerabilityEPSS 0.6%CVE-2024-37113CRITICALWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerabilityEPSS 0.5%CVE-2024-37109CRITICALWordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerabilityEPSS 0.5%CVE-2024-37112CRITICALWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerabilityEPSS 0.5%CVE-2024-37111HIGHWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Denial of Service Attack vulnerabilityEPSS 0.5%CVE-2024-37107HIGHWordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerabilityEPSS 0.4%CVE-2026-25445HIGHWordPress WishList Member X plugin <= 3.29.0 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57384MEDIUMWordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%