Cristián Lávaque vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Cristián Lávaque products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-58998 Critical · 9.8 CWE-502 Nov 6, 2025

WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701.

CVE-2025-62023 Critical · 9.0 CWE-94 Oct 22, 2025

WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.