Advisories · Technology

WP Sharks s2Member Pro.

Every CVE that names WP Sharks s2Member Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-12563 CVE record

CVSS 8.8 High

s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
- WP Sharks s2Member Pro
- File inclusion
Not analysed yet 18 Mar 2025
CVE-2024-12562 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

s2Member Pro <= 241216 - Unauthenticated PHP Object Injection
- WP Sharks s2Member Pro
- Insecure deserialization
Not analysed yet 15 Feb 2025
CVE-2024-31237 CVE record

CVSS 7.5 High

WordPress s2Member plugin <= 240315 - Privilege Escalation vulnerability
- WP Sharks s2Member Pro
- Privilege escalation
Not analysed yet 17 May 2024