s2Member
Cristián Lávaque
Developer
261017
Latest version
8,000
Installations
No date
Last updated
Vulnerability history
0 present
16 patched
10 Mitigation rules
- Unauthenticated Remote Code Execution vulnerability<= 2609271 day ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2610116 days ago
- Unauthenticated Remote Code Execution vulnerability<= 26081424/09/2026
- Contributor+ Stored XSS via Shortcode vulnerability< 26080519/08/2026
- Unauthenticated Privilege Escalation via Account Takeover vulnerability<= 26012719/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 25100518/02/2026
- WordPress s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin <= 241216 - Reflected Cross-Site Scripting vulnerability<= 24121631/12/2025
- Remote Code Execution (RCE) vulnerability<= 25090501/10/2025
- PHP Object Injection Vulnerability<= 25070121/08/2025
- Local File Inclusion vulnerability<= 25041904/04/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 24121622/02/2025
- Unauthenticated PHP Object Injection vulnerability<= 24121614/02/2025
- Authenticated (Contributor+) Sensitive Information Exposure vulnerability<= 24111416/12/2024
- Remote Code Execution (RCE) vulnerability<= 24111402/12/2024
- Privilege Escalation vulnerability<= 24031505/04/2024
- Information Exposure vulnerability<= 23081519/03/2024