s2Member
Cristián Lávaque
Developer
260325
Latest version
9,000
Installations
No date
Last updated
Vulnerability history
0 present
12 patched
8 Mitigation rules
- Unauthenticated Privilege Escalation via Account Takeover vulnerability<= 26012719/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 25100518/02/2026
- WordPress s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin <= 241216 - Reflected Cross-Site Scripting vulnerability<= 24121631/12/2025
- Remote Code Execution (RCE) vulnerability<= 25090501/10/2025
- PHP Object Injection Vulnerability<= 25070121/08/2025
- Local File Inclusion vulnerability<= 25041904/04/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 24121622/02/2025
- Unauthenticated PHP Object Injection vulnerability<= 24121614/02/2025
- Authenticated (Contributor+) Sensitive Information Exposure vulnerability<= 24111416/12/2024
- Remote Code Execution (RCE) vulnerability<= 24111402/12/2024
- Privilege Escalation vulnerability<= 24031505/04/2024
- Information Exposure vulnerability<= 23081519/03/2024