Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

Wishlist Member — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Wishlist Member, with AI-generated Chinese analysis, references, and POCs.

Vendor: Wishlist Member

CVE IDTitleCVSSSeverityPublished
CVE-2026-6897 Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action CWE-269 8.8 High2026-05-23
CVE-2026-6419 Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action CWE-269 8.8 High2026-05-23
CVE-2026-6895 Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action CWE-269 8.8 High2026-05-23
CVE-2026-6898 WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action CWE-269 8.8 High2026-05-23

All 4 known CVE vulnerabilities affecting Wishlist Member with full Chinese analysis, references, and POCs where available.