Read the docs

Cristián Lávaque

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cristián Lávaque records in CISA KEV

No Cristián Lávaque vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-36642 CVE-2025-58998 · GHSA-8rx4-fj24-3rqc

WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00503 Published 2025-11-06 No fix listed CWE-502
TI-2024-34719 CVE-2024-51815 · GHSA-fj85-3hpv-97rg

WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00473 Published 2024-12-06 No fix listed CWE-94
Open these records in search →