Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2025-02-18	CVE-2024-11376	Cross-site Scripting vulnerability in Clavaque S2Member The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 241114. network low complexity clavaque CWE-79	6.1