Skip to content
OpenAdvisories

Vendor

WP Sharks

3 known vulnerabilities.

Products

s2Member Pro 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-12562

    s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

    The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated …

    WP Sharks s2Member Pro Web / CMS