Skip to content
PluginCanary

s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

by Cristián Lávaque · 8,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 2 Nov 2026, fixed in 261001.

81/ 100 Canary Score
Sub-scores for s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 2 Nov 2026, fixed in 261001. Update to version 261001 or later.2 Nov 2026Evidence
  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 261017. Update to version 261017 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 260829. Update to version 260829 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 7 Aug 2026, fixed in 260805. Update to version 260805 or later.7 Aug 2026Evidence
  • InfoSEC-313 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
raamdev29 Nov 2016 to 29 Apr 2019, 14 commits
clavaque20 May 2019 to 17 Oct 2026, 131 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
18 days ago
Releases, 24 months
30
Tested up to
7.2 current
Requires PHP
5.6.2 supported 8.2+
Releases per quarter for s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Q1 20243
Q2 20240
Q3 20240
Q4 20242
Q1 20251
Q2 20256
Q3 20252
Q4 20251
Q1 20266
Q2 20262
Q3 20267
Q4 20263

Last release 17 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
2 Nov 2026s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter9.8<= 2609272610010
27 Oct 2026s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute6.4<= 2610112610170
24 Sep 2026s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return8.8<= 2608142608290
7 Aug 2026s2Member <= 260804 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2608042608050
18 Feb 2026s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover9.8<= 2601272602150
18 Feb 2026s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2510052601010
1 Oct 2025s2Member <= 250905 - Unauthenticated Remote Code Execution9.8<= 2509052510055
21 Aug 2025s2Member <= 250701 - Unauthenticated PHP Object Injection8.1<= 25070125090515
4 Apr 2025s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion7.2<= 25041925042420
22 Feb 2025s2Member Pro <= 241216 - Reflected Cross-Site Scripting6.1<= 2412162502140
17 Feb 2025s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting6.1<= 2412162502140
16 Dec 2024s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure8.8<= 2411142412160
2 Dec 2024s2Member (Pro) <= 241114 - Unauthenticated Remote Code Execution8.1<= 24111424121614
5 Apr 2024s2Member <= 240315 - Limited Privilege Escalation9.1<= 2403152403250
18 Mar 2024s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information Exposure5.3<= 2308152403150
12 Feb 2012s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting7.2< 1112201112200

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.1 from 234 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star164
4 star13
3 star8
2 star7
1 star42

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
4 May 20263,446
11 May 2026951
18 May 20261,012
25 May 2026614
1 Jun 2026418
8 Jun 2026367
15 Jun 2026402
22 Jun 2026351
29 Jun 2026343
6 Jul 2026400
13 Jul 2026345
20 Jul 2026352
27 Jul 2026375
3 Aug 20264,028
10 Aug 20263,891
17 Aug 20261,485
24 Aug 20263,740
31 Aug 20261,254
7 Sep 20266,500
14 Sep 20265,124
21 Sep 20263,814
28 Sep 20264,773
5 Oct 20261,557
12 Oct 20263,720
19 Oct 20261,634
26 Oct 20261,443
2 Nov 2026395

Weekly downloads over the last 4 weeks are 8% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Membership After Login RedirectionScore 91 · 10,000+My Private Site - Make Your Whole Site Private, Force Login & Block Registration SpamScore 91 · 10,000+Simple Membership Form ShortcodeScore 91 · 2,000+SureMembers - Membership & Content Restriction PluginScore 91 · 2,000+Groups 404 RedirectScore 91 · 1,000+

Facts

Version261017
AuthorCristián Lávaque
Added22 Mar 2010
Last updated17 Oct 2026
Active installs8,000+
Requires WordPress4.2
Tested up to7.2
Requires PHP5.6.2
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsmembership, paid access, members-only, paid subscriptions, content restriction

Other plugins by this author: Comet Cache, Comment Mail

Questions

Is s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions still maintained?

s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions was last updated on 17 Oct 2026. Its Canary status is Healthy.

Is s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions safe?

s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions has no open unpatched vulnerabilities on record. 13 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions?

The wordpress.org author is Cristián Lávaque. Recent committers: clavaque, raamdev, JasWSInc, WebSharks, PriMoThemes. We have recorded no ownership change.

What can I use instead of s2Member - Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions?

Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue