s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions vulnerabilities

Product

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

by clavaque · last CVE Oct 28, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 2Medium 4Low 0

Severity

All severities7 Critical1 High2 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-19804	8.8	1%	Sep 25	s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return Affected: through 260814
CVE-2024-8326	8.8	1%	Dec 17	s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure Affected: through 241114