Read the docs

clavaque

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

clavaque records in CISA KEV

No clavaque vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
S2member 1 record LOW

Records

8 records

TI-2026-84120 CVE-2026-86596 · GHSA-9wfw-qq7f-66hm

Code injection in s2Member plugin via item_name IPN parameter

Priority MEDIUM 45

The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01487 Published 2026-11-02 No fix listed CWE-94
TI-2026-16062 CVE-2026-19804 · GHSA-fgx2-6hhq-hwhw

s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return

Priority MEDIUM 42

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 260814 v…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0104 Published 2026-09-25 No fix listed CWE-94
TI-2024-07720 CVE-2024-8326 · GHSA-rjfh-53gg-ffqq

Information disclosure in clavaque s2Member – Excellent for All Kinds of Memberships…

Priority MEDIUM 41

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00583 Published 2024-12-17 No fix listed CWE-200
TI-2024-00828 CVE-2024-0899 · GHSA-8727-cvxh-wg93

Improper access control in clavaque s2Member – Excellent for All Kinds of Memberships…

Priority LOW 31

The s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Information Exposure in all versions up to, and includi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00556 Published 2024-04-09 No fix listed CWE-284
TI-2026-81740 CVE-2026-109972 · GHSA-2wqw-8w6m-g247

Stored cross-site scripting in s2Member WordPress plugin

Priority LOW 28

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'date_format' parameter in all v…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00275 Published 2026-10-28 No fix listed CWE-79
TI-2025-12552 CVE-2025-13732 · GHSA-7vx9-jr5p-9hxh

s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 's2Eot' shortcode in al…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00358 Published 2026-02-19 No fix listed CWE-79
TI-2024-10541 CVE-2024-11376 · GHSA-7vgh-h2qw-362r

Cross-site scripting in clavaque s2Member – Excellent for All Kinds of Memberships…

Priority LOW 28

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg witho…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2025-02-18 No fix listed CWE-79
Open these records in search →