What’s Vulnerable › Products

clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions version is affected

Latest clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions vulnerabilities

• CVE-2026-109972 — s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute (CVSS 6.4)
• CVE-2026-19804 — s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return (CVSS 8.8)
• CVE-2026-1994 — s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8)
• CVE-2025-13732 — s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
• CVE-2024-11376 — s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-8326 — s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 8.8)