s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions vulnerabilities

Product

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

by clavaque · last CVE Oct 28, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 1High 1Medium 2Low 0

Severity

All severities4 Critical1 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-109972 New	6.4	–	Oct 28	s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute Affected: through 261011
CVE-2025-13732	6.4	0%	Feb 19	s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 251005