S2member vulnerabilities
We track 1 vulnerability in S2member products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 15, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest S2member vulnerabilities
- 9.8 Critical severity
s2Member Pro: Deserialization of Untrusted Data
The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated a