Threats tagged 'ghsa-9wfw-qq7f-66hm'

The s2Member plugin for WordPress contains a critical remote code execution vulnerability affecting all versions up to and including 260927. The flaw arises from insufficient sanitization of the 'item_name' parameter, allowing authenticated users with custom-level access or higher to execute arbitrary code on the server. The vulnerability is due to improper handling in the strip_php_tags_deep() function and a post-interpolation process that reconstructs a valid PHP opening tag, enabling code injection within email templates.