Skip to content
OpenAdvisories

Vendor

Cristián Lávaque

6 known vulnerabilities.

Products

s2Member 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-125440

    WordPress s2Member plugin <= 261106 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106.

    Cristián Lávaque s2Member
  • Medium 4.9
    CVE-2025-32137

    WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability

    Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.This issue affects s2Member: from n/a through <= 250419.

    Cristián Lávaque s2Member