Is CVE-2026-57709 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-57709?

CVE-2026-57709 has a CVSS v3 severity of HIGH (8.6).

Back

CVE-2026-57709

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a through <= 3.1.0.