agentprime: wishlist-memberEvery new CVE for wishlist-member.https://agentprime.io/CVE-2026-12949: Wishlist Member X <= 3.34.1 - Unauthenticated Account Takeover via 'mergewith' Parameterhttps://agentprime.io/advisories/CVE-2026-12949/https://agentprime.io/advisories/CVE-2026-12949/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Aug 2026 05:30:43 GMTCVEcriticalCVE-2026-6419: Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX actionhttps://agentprime.io/advisories/CVE-2026-6419/https://agentprime.io/advisories/CVE-2026-6419/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 May 2026 04:27:18 GMTCVECVE-2026-6897: Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX actionhttps://agentprime.io/advisories/CVE-2026-6897/https://agentprime.io/advisories/CVE-2026-6897/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 May 2026 04:27:17 GMTCVECVE-2026-6895: Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Actionhttps://agentprime.io/advisories/CVE-2026-6895/https://agentprime.io/advisories/CVE-2026-6895/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 May 2026 04:27:17 GMTCVECVE-2026-6898: WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX actionhttps://agentprime.io/advisories/CVE-2026-6898/https://agentprime.io/advisories/CVE-2026-6898/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 May 2026 04:27:16 GMTCVE