Cristián Lávaque

Products

ProductCVEsExploitedLatest
s2Member5–Nov 6, 2025

Exploited and recent CVEs

  • CVE-2025-58998 Critical 9.8 WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability 0.5%
  • CVE-2025-62023 Critical 9.0 WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability 0.4%
  • CVE-2025-32137 Medium 4.9 WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-26879 High 7.1 WordPress s2Member Plugin <= 241216 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51815 Critical 9.0 WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability 0.5%