CVE-2026-6898 | Wishlist Member Plugin up to 3.30.1 on WordPress REST API generate_api_key privileges management

A vulnerability classified as critical was found in Wishlist Member Plugin up to 3.30.1 on WordPress. This vulnerability affects the function WishListMember3_Hooks::generate_api_key of the component REST API. Executing a manipulation can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-6898. The attack can be launched remotely. No exploit exists.