Really Simple Security logo

Log out
Get PRO

Latest

Output validation vulnerability in s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions 250701

  • Severity: high-risk
  • Status: Fixed
  • Publication: August 21, 2025

The s2Member plugin for WordPress has a security issue that allows hackers to inject a type of code called PHP Object through untrusted information. This can be done by someone who is not authorized to access the website. This vulnerability exists in versions up to and including 250701. If another plugin or theme is installed on the website that has a similar issue, the attacker could potentially delete important files, access confidential information, or run their own code on the website.

Detected in:

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.