Critical
CVE-2026-12949
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
High
CVE-2026-6895
Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action
High
CVE-2026-6897
Wishlist Member <= 3.32.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action
High
CVE-2026-6898
WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action
High
CVE-2026-6419
Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action
High
CVE-2026-25445
Wishlist Member <= 3.32.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-25446
Wishlist Member <= 3.32.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-24575
WishList Member X <= 3.32.0 - Missing Authorization
Medium
CVE-2024-37110
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
High
CVE-2024-37107
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-37109
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2024-37106
WishList Member X < 3.26.7 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
High
CVE-2024-37108
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2024-37112
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
Medium
CVE-2024-37111
WishList Member X < 3.26.7 - Unauthenticated Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.