s2Member vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

S2

Product

s2Member

by Cristián Lávaque · last CVE Nov 6, 2025

5

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 3High 1Medium 1Low 0

Severity

All severities5 Critical3 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add s2Member to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-58998	9.8	1%	Nov 6	WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability Affected: through 250701
CVE-2025-62023	9.0	0%	Oct 22	WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability Affected: through 250905
CVE-2024-51815	9.0	0%	Dec 6	WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability Affected: through 241114
CVE-2025-26879	7.1	0%	Mar 3	WordPress s2Member Plugin <= 241216 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 241216
CVE-2025-32137	4.9	1%	Apr 4	WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability Affected: through 250419