Plugin icon

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

s2member

Vulnerabilities:

13

Last Updated:

October 17, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
s2Member < 260829 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return
Fixed in
Fixed in 260829
CVSS
9.8 (critical)
Published
2026-08-07
Title
s2Member < 260805 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 260805
CVSS
6.8 (medium)
Published
2026-02-18
Title
s2Member < 260215 - Unauthenticated Privilege Escalation via Account Takeover
Fixed in
Fixed in 260215
CVSS
9.8 (critical)
Published
2026-02-18
Title
s2Member < 260101 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 260101
CVSS
6.4 (medium)
Published
2025-10-01
Title
s2Member < 251005 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 251005
CVSS
9.8 (critical)
Published
2025-08-21
Title
s2Member < 250905 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 250905
CVSS
8.1 (high)
Published
2025-04-04
Title
s2Member < 250424 - Administrator+ Local File Inclusion
Fixed in
Fixed in 250424
CVSS
4.7 (medium)
Published
2025-02-22
Title
s2Member Pro < 250214 - Reflected Cross-Site Scripting
Fixed in
Fixed in 250214
CVSS
6.1 (medium)
Published
2025-02-17
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 250214 - Reflected Cross-Site Scripting
Fixed in
Fixed in 250214
CVSS
6.1 (medium)
Published
2024-12-16
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 241216 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 241216
CVSS
8.8 (high)
Published
2024-12-02
Title
s2Member (Pro) < 241216 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 241216
CVSS
8.1 (high)
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Fixed in
Fixed in 240325
CVSS
6.5 (medium)
Published
2024-03-18
Title
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 240315 - Information Exposure
Fixed in
Fixed in 240315
CVSS
5.3 (medium)