Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: S2member Component: S2member Clear all filters
TI-2024-11656 CVE-2024-12562 · GHSA-wjr9-hj62-43j7

s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

Priority MEDIUM 45

The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2025-02-15 No fix listed CWE-502