Membership For WooCommerce vulnerabilities | LiveThreat CVE Feed

Product

Membership For WooCommerce

by WP Swings · last CVE Jul 13, 2026

CVEs

On KEV

8.6

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 1Low 0

Severity

Exploitation

Watch

Add Membership For WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57709	8.6	1%	Jul 13	WordPress Membership For WooCommerce plugin <= 3.1.0 - Arbitrary File Deletion vulnerability Affected: through 3.1.0
CVE-2025-67909	7.5	0%	Dec 24	WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.0.3
CVE-2025-54692	7.5	0%	Aug 14	WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control Vulnerability Affected: through 2.9.0
CVE-2025-49265	7.5	0%	Jun 9	WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control Vulnerability Affected: through 2.8.1