Membership For WooCommerce vulnerabilities

4 known vulnerabilities in Membership For WooCommerce from WP Swings. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Membership For WooCommerce: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-57709Jul 13, 2026WP Swings

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a through <= 3.1.0.

• 7.5 High severity

  Membership For WooCommerce: Authorization Bypass Through User-Controlled Key

  CVE-2025-67909Dec 24, 2025WP Swings

  Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Membership For WooCommerce: from n/a th

• 7.5 High severity

  Membership For WooCommerce: Missing Authorization

  CVE-2025-54692Aug 14, 2025WP Swings

  Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Membership For WooCommerce: from n/a through <= 2.9.0.

• 7.5 High severity

  Membership For WooCommerce: Missing Authorization

  CVE-2025-49265Jun 9, 2025WP Swings

  Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Membership For WooCommerce: from n/a through <= 2.8.1.