Skip to content
Threat Feed

Product

WishList Member Plugin <= 3.30.1

1 brief RSS
critical advisory

WishList Member WordPress Plugin Missing Authorization Leads to Privilege Escalation (CVE-2026-6895)

The WishList Member plugin for WordPress is vulnerable to Missing Authorization, allowing attackers to obtain the REST API Secret Key and escalate privileges to administrator.

WishList Member plugin <= 3.30.1 wordpress plugin privilege-escalation cve
2r 3t 1c