WP Sharks vulnerabilities
We track 4 vulnerabilities in WP Sharks products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2025.
Latest WP Sharks vulnerabilities
- 8.8 High severity
s2Member Pro: Improper Control of Filename for Include/Require Statement in PHP Program
The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include
- 9.8 Critical severity
s2Member Pro: Deserialization of Untrusted Data
The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated a
- 9.0 Critical severity
s2Member: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.
- 7.5 High severity
s2Member Pro: Improper Privilege Management
Improper Privilege Management vulnerability in WP Sharks s2Member Pro allows Privilege Escalation.This issue affects s2Member Pro: from n/a through 240315.