CVE-2024-37109: Wishlistmember Wishlist Member

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.

Affected products

• Wishlistmember Wishlist Member: up to and including 3.26.7

Published 2024-06-24. Last modified 2026-06-17.