CVE-2026-86596criticalexploração observadaCWE-94

CVE-2026-86596: falha crítica em clavaque s2Member – Excellent for All Kinds of…

s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

Publicada em

Seguir esta CVE+ Monitorar s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

70Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.

ssvc Actcvss 9.8epss 1.5%
da publicação à armano mesmo dia
Publicada no NVD2 de nov.
1ª PoC2 de nov.
VulnCheck2 de nov.
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which only strips literal '<?' sequences, combined with a post-interpolation placeholder cleanup that reassembles a valid '<?php' opener after the attacker-controlled value has already been embedded in the email template. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
clavaque · s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — clavaque s2Member – Excellent for All Kinds of…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-19804HIGHs2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy ReturnEPSS 1.0%CVE-2024-8326HIGHs2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.6%CVE-2024-0899MEDIUMs2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information ExposureEPSS 0.6%CVE-2024-11376MEDIUMs2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-1994CRITICALs2Member <= 260127 - Unauthenticated Privilege Escalation via Account TakeoverEPSS 0.4%CVE-2025-13732MEDIUMs2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%