Plugin icon

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

s2member

Vulnerabilities:

11

Last Updated:

March 25, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
s2Member < 260215 - Unauthenticated Privilege Escalation via Account Takeover
Fixed in
Fixed in 260215
CVSS
9.8 (critical)
Published
2026-02-18
Title
s2Member < 260101 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 260101
CVSS
6.4 (medium)
Published
2025-10-01
Title
s2Member < 251005 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 251005
CVSS
9.8 (critical)
Published
2025-08-21
Title
s2Member < 250905 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 250905
CVSS
8.1 (high)
Published
2025-04-04
Title
s2Member < 250424 - Administrator+ Local File Inclusion
Fixed in
Fixed in 250424
CVSS
4.7 (medium)
Published
2025-02-22
Title
s2Member Pro < 250214 - Reflected Cross-Site Scripting
Fixed in
Fixed in 250214
CVSS
6.1 (medium)
Published
2025-02-17
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 250214 - Reflected Cross-Site Scripting
Fixed in
Fixed in 250214
CVSS
6.1 (medium)
Published
2024-12-16
Title
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 241216 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 241216
CVSS
8.8 (high)
Published
2024-12-02
Title
s2Member (Pro) < 241216 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 241216
CVSS
8.1 (high)
Published
2024-04-05
Title
s2Member < 240325 - Limited Privilege Escalation
Fixed in
Fixed in 240325
CVSS
6.5 (medium)
Published
2024-03-18
Title
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 240315 - Information Exposure
Fixed in
Fixed in 240315
CVSS
5.3 (medium)