cleantalk
Vulnerabilities and Security Researches

Membership For WooCommerce – Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members wi, CVE-2025-39579

CVE, Research URL

CVE-2025-39579

Published on
Apr 16, 2025
Research Description
Membership For WooCommerce [membership-for-woocommerce] < 2.8.1 CVE-2025-39579 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Membership For WooCommerce allows DOM-Based XSS. This issue affects Membership For WooCommerce: from n/a through 2.8.0.
Affected versions
Min -, max 2.8.1.
Status
vulnerable