Input validation vulnerability in s2Member Pro 241216

The s2Member Pro plugin for WordPress has a vulnerability that allows attackers to inject malicious code. This can happen when untrusted information is entered into the ‘s2member_pro_remote_op’ parameter. Unauthenticated attackers can take advantage of this vulnerability, but there is no known way for them to do so at this time. However, if there is a POP chain in an additional plugin or theme on the target system, the attacker may be able to delete files, access sensitive information, or run code.