Cristián Lávaque vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3		CVE-2026-125440s2Member (WordPress plugin) · Basic XSS Medium5.32026-11-13CVE Database V5CVE-2026-125440 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106. Vulnerability Cristián Lávaque	CVE Database V5	2026-11-13
Critical	9.8	EPSS 0.5%	CVE-2025-58998s2Member (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-06CVE Database V5CVE-2025-58998 Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701. EPSS 0.5%Vulnerability Cristián Lávaque	CVE Database V5	2025-11-06
Critical	9.0	EPSS 0.4%	CVE-2025-62023s2Member (WordPress plugin) · Code Injection Critical9.0EPSS 0.4%2025-10-22CVE Database V5CVE-2025-62023 Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905. EPSS 0.4%Vulnerability Cristián Lávaque	CVE Database V5	2025-10-22
Medium	4.9	EPSS 0.8%	CVE-2025-32137s2Member (WordPress plugin) · Relative Path Traversal Medium4.9EPSS 0.8%2025-04-04CVE Database V5CVE-2025-32137 Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.This issue affects s2Member: from n/a through <= 250419. EPSS 0.8%Vulnerability Cristián Lávaque	CVE Database V5	2025-04-04
High	7.1	EPSS 0.3%	CVE-2025-26879s2Member (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-03-03CVE Database V5CVE-2025-26879 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s2Member s2member allows Reflected XSS.This issue affects s2Member: from n/a through <= 241216. EPSS 0.3%Vulnerability Cristián Lávaque	CVE Database V5	2025-03-03
Critical	9.0	EPSS 0.5%	CVE-2024-51815s2Member (WordPress plugin) · Code Injection Critical9.0EPSS 0.5%2024-12-06CVE Database V5CVE-2024-51815 Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114. EPSS 0.5%Vulnerability Cristián Lávaque	CVE Database V5	2024-12-06

Page 1 of 1