Security
فارسی
All products

s2member

WordPress · Plugin
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN ParameterCVE-2026-86596 s2member WordPress Critical Fix reported
s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode AttributeCVE-2026-109972 s2member WordPress Medium Fix reported
s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy ReturnCVE-2026-19804 s2member WordPress High Fix reported
s2Member <= 260804 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-15047 s2member WordPress Medium Fix reported
s2Member <= 260127 - Unauthenticated Privilege Escalation via Account TakeoverCVE-2026-1994 s2member WordPress Critical Fix reported
s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-13732 s2member WordPress Medium Fix reported
s2Member <= 250701 - Unauthenticated PHP Object InjectionCVE-2025-58998 s2member WordPress High Fix reported
s2Member <= 250905 - Unauthenticated Remote Code ExecutionCVE-2025-62023 s2member WordPress Critical Fix reported
s2Member <= 250419 - Authenticated (Administrator+) Local File InclusionCVE-2025-32137 s2member WordPress High Fix reported
s2Member Pro <= 241216 - Reflected Cross-Site ScriptingCVE-2025-26879 s2member WordPress Medium Fix reported
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site ScriptingCVE-2024-11376 s2member WordPress Medium Fix reported
s2Member (Pro) <= 241114 - Unauthenticated Remote Code ExecutionCVE-2024-51815 s2member WordPress High Fix reported
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information ExposureCVE-2024-8326 s2member WordPress High Fix reported
s2Member <= 240315 - Limited Privilege EscalationCVE-2024-31237 s2member WordPress Critical Fix reported
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information ExposureCVE-2024-0899 s2member WordPress Medium Fix reported
s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site ScriptingCVE-2011-5082 s2member WordPress High Fix reported