183 matches found
CVE-2026-125440
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106...
cve-2026-86596-poc
CVE-2026-86596 PoC Single-file Python PoC for the s2Member stripphptagsdeep leaves it alone because there is no literal ?. The %%itemname%% replacement inserts it; the final %%.+?%% cleanup removes %%x%%, leaving a valid ?php opener. Modes One command python3 poc.py https://wordpress.lab That is...
CVE-2026-125440
The s2Member WordPress plugin (versions
CVE-2026-125440 WordPress s2Member plugin <= 261106 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106...
EUVD-2026-125365
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106...
WordPress s2Member plugin <= 261106 - Content Injection vulnerability
Content Injection vulnerability discovered by Yusuf Ozturk in WordPress Plugin s2Member versions = 261106...
PT-2026-146872
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106...
CVE-2026-86596
CVE-2026-86596 - s2Member reassembles → bypasses stripphptagsdeep, reassembles to valid ?php after placeholder cleanup. Usage Single target RCE python3 poc.py target.com --cmd "id" --authorized Persistent webshell access: /shell.php?pass=cmd python3 poc.py target.com --cmd "shell:mysecret"...
EUVD-2026-115642
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '?' sequences, combined with a post-interpolation...
Exploit for CVE-2026-86596
CVE-2026-86596 PoC Single-file Python PoC for the s2Member...
CVE-2026-86596
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '?' sequences, combined with a post-interpolation...
CVE-2026-86596 s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '?' sequences, combined with a post-interpolation...
CVE-2026-86596
The s2Member plugin for WordPress (versions <= 260927 ) is vulnerable to Remote Code Execution (RCE) via the 'item_name' IPN parameter. The flaw stems from insufficient sanitization in the strip_php_tags_deep() function, which only removes literal <? sequences. This, combined with a post-in...
WordPress s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin <= 260927 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by khanhnv in WordPress Plugin s2Member versions = 260927...
CVE-2026-86596: clavaque: The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <=…
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '' sequences, combined with a post-interpolation...
PT-2026-135827
Name of the Vulnerable Software and Affected Versions s2Member versions prior to 260928 Description Authenticated attackers with custom-level access and above can achieve remote code execution on the server. The issue exists in the IPN email template handling due to insufficient sanitization in t...
VulnCheck KEV: CVE-2026-86596
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, = 260927 via the 'itemname' parameter parameter. This is due to insufficient sanitization in stripphptagsdeep, which only strips literal '?' sequences, combined with a post-interpolation...
CVE-2026-109972
The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dateformat' parameter in all versions up to, and including, = 261011 due to insufficient input sanitization...
CVE-2026-109972
The s2Member WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including
CVE-2026-109972 s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute
The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dateformat' parameter in all versions up to, and including, = 261011 due to insufficient input sanitization...