A critical code injection vulnerability in the s2Member plugin permits unauthenticated attackers to execute arbitrary code, posing a severe risk to server integrity.

This is an improper control of code generation vulnerability, commonly known as Code Injection, which allows an unauthenticated attacker to bypass security controls and execute arbitrary commands.

The ability for an unauthenticated attacker to inject and execute arbitrary code represents a total compromise of the application and potentially the underlying server. Given the CVSS score of 9.8, this vulnerability poses an extreme threat to data confidentiality, integrity, and availability, likely resulting in full site takeover.

Immediate Action: Update the s2Member plugin to version 251005 or later immediately.

Proactive Monitoring: Inspect web server logs for suspicious code-like strings or anomalous execution patterns that deviate from standard plugin behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious input strings and block requests that attempt to trigger code injection vulnerabilities.

Public Exploit Available: Unknown

Immediate remediation is required for all environments running the s2Member plugin. Update to version 251005 immediately to patch this critical security flaw and prevent potential remote code execution attacks against your infrastructure.