Critical CVEs

CVE-2026-86596 — Critical vulnerability brief

November 2, 2026CVSS 9.8

The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including,

CVSS base score: 9.8 / 10