{
 "id": "WPSEC-2026-0924",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0924/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0924/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0924/index.md",
 "title": "s2Member <= 261001 - Unauthenticated Missing Authorization to Protected Content via REST API",
 "description": "The s2Member plugin for WordPress is vulnerable to unauthorized access of restricted content via the REST API in all versions up to, and including, 261001. This is due to the REST security gate identifying the resource only from the route's type and ID segments, so it never checked comments, and it did not check single items of post types whose REST base differs from the post type name. This makes it possible for unauthenticated attackers to read comments on membership-restricted posts and pages, and restricted custom post type content, that should be available only to members with the required access level.",
 "plugin": {
  "slug": "s2member",
  "name": "s2Member",
  "full_name": "s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions",
  "wordpress_org": "https://wordpress.org/plugins/s2member/",
  "advisories_url": "https://wpsec.com/vuln/plugin/s2member/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/s2member"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "261011",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 261011"
  ]
 },
 "introduced_in": null,
 "fixed_in": "261011",
 "remediation": "Update to 261011 or later.",
 "fix_released": "2026-10-11T05:37:00+00:00",
 "published": "2026-10-14T13:49:25+00:00",
 "updated": "2026-10-14T13:19:44.044726+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0924/",
  "https://plugins.svn.wordpress.org/s2member/tags/261011/",
  "https://wordpress.org/plugins/s2member/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/s2member",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-14"
 }
}