Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 38
   CVE NVD 1h ago

   The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name'…

   The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep()…

   CVSS 9.8 CVE-2026-86596 Clavaque Web platform
2. 10
   CVE NVD 5d ago

   The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable…

   The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'date_format' parameter in all versions…

   CVSS 6.4 CVE-2026-109972 Clavaque Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Clavaque&limit=100. RSS for this section: feed.xml.