Vendor

S2Member

1 brief RSS

Remote Code Execution in s2Member WordPress Plugin

An unauthenticated remote code execution vulnerability (CVE-2026-19804) exists in the s2Member WordPress plugin, allowing attackers to execute code via the first_name parameter when combined with a leaked proxy verification key.

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions wordpress web-application rce cve-2026-19804

1r 2t 1c 51m ago