s2Memberにコード実行の脆弱性、260927以前が対象
Summary
WordPressの会員制プラグインs2Memberに、サーバー上でコードを実行されるおそれのある脆弱性が11月2日に公表されました。260927以前を使うサイトは、更新の有無を確認して修正版を適用し、難しければ無効化を検討してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressの会員制プラグインs2Memberに、サーバー上でコードを実行されるおそれのある脆弱性が11月2日に公表されました。260927以前を使うサイトは、更新の有無を確認して修正版を適用し、難しければ無効化を検討してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| clavaque | s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
≤ 260927 |
— |
Original description The description as published by the source.
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which only strips literal '<?' sequences, combined with a post-interpolation placeholder cleanup that reassembles a valid '<?php' opener after the attacker-controlled value has already been embedded in the email template. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server.
Source: CVE.org (CVE Program・cvelistV5) NVD