CVE-2024-37106: WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability
Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a through 3.26.6
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37106?
CVE-2024-37106 is considered a high severity vulnerability due to the potential for unauthorized access and exploitation.
How do I fix CVE-2024-37106?
To fix CVE-2024-37106, upgrade to the latest version of WishList Member X, ensuring you are using version 3.26.7 or higher.
What systems are affected by CVE-2024-37106?
CVE-2024-37106 affects WishList Member X from n/a through version 3.26.6.
What type of vulnerability is CVE-2024-37106?
CVE-2024-37106 is classified as a Missing Authorization vulnerability, allowing for incorrectly configured access control.
Can CVE-2024-37106 lead to data exposure?
Yes, CVE-2024-37106 can lead to unauthorized access to sensitive data due to the unauthorized exploitation of access control levels.