WP Sharks

Products

ProductCVEsExploitedLatest
s2Member Pro3–Mar 18, 2025

Exploited and recent CVEs

  • CVE-2024-12563 High 8.8 s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode 0.6%
  • CVE-2024-12562 Critical 9.8 s2Member Pro <= 241216 - Unauthenticated PHP Object Injection 0.9%
  • CVE-2024-31237 High 7.5 WordPress s2Member plugin <= 240315 - Privilege Escalation vulnerability 0.4%