Skip to content
CCristián Lávaque
Products
| Product | CVEs | Exploited | Latest |
| s2Member | 5 | – | Nov 6, 2025 |
Exploited and recent CVEs
-
CVE-2025-58998
Critical 9.8
WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability
0.5%
-
CVE-2025-62023
Critical 9.0
WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability
0.4%
-
CVE-2025-32137
Medium 4.9
WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability
0.8%
-
CVE-2025-26879
High 7.1
WordPress s2Member Plugin <= 241216 - Reflected Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2024-51815
Critical 9.0
WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability
0.5%