clavaque

Products

Product	CVEs	Exploited	Latest
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions	8	–	Nov 2, 2026

CVE-2026-86596 Critical 9.8 s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter 1.5%
CVE-2026-109972 Medium 6.4 s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute 0.3%
CVE-2026-19804 High 8.8 s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return 1.0%
CVE-2026-1994 Critical 9.8 s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover 0.4%
CVE-2025-13732 Medium 6.4 s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
CVE-2024-11376 Medium 6.1 s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting 0.4%
CVE-2024-8326 High 8.8 s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure 0.6%
CVE-2024-0899 Medium 5.3 s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information Exposure 0.6%