Skip to content
OpenAdvisories

Vendor

WP Sharks

3 known vulnerabilities.

Products

s2Member Pro 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-12563

    s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode

    The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include…

    WP Sharks s2Member Pro Web / CMS
  • High 7.5
    CVE-2024-31237

    WordPress s2Member plugin <= 240315 - Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in WP Sharks s2Member Pro allows Privilege Escalation.This issue affects s2Member Pro: from n/a through 240315.

    WP Sharks s2Member Pro