s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

158 searches this plugin appeared in over the last 90 days, 20 listed. 120 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 5 months ago; a band this size takes about a year or more to cross, which places it about 55% of the way through.

1. ★★★★★ belindaj

   7mo ago

   I need a lot more than 5 stars to properly review s2member. I took on a project from a previous web host and it has been my first and so far only experience with this member plugin. Just from lack of personal experience I was tempted to try to rebuild the existing user system using other plugins and apps that I had more knowledge of – but at the same time it housed a large existing member database and I wanted to try to work within the existing framework if possible. I was having a lot of trouble accomplishing what I needed to work and asked for assistance through s2 support and I am so impressed with the level of professionalism, prompt response, ease of understanding the needs I had, and basically – meeting me on my level. I really cannot express enough appreciation for this level of support. I feel like Cristián is now a true colleague that I can continue to bring issues to and maybe in some small way I’ll even contribute to future s2member enhancements to this already extremely powerful member plugin.

   Read on wp.org ↗
2. ★★★★★ leoravera

   7mo ago

   The plugin is still working very well, you can do almost anything, especially using shorcodes and the “if” function. Cristian is actively working on the plugin, and provides a great support. Other plugins I used have become more expensive and the support is a nightmare, while is so easy to get in touch with Cristián Lávaque. 5 star for me, I’m happy I discovered this plugin many years ago and that it’s still supported and woking very well!

   Read on wp.org ↗
3. ★★★★★ paul16f1

   8mo ago

   Cristian got back to me super quick and resolved my problem.Unusual to have such great customer service.It is a great plugin and so versatile.thanks Cristian

   Read on wp.org ↗
4. ★★★★★ kemmieg

   1.0y ago

   I have been using this plugin for a couple of my websites and it’s a great plugin. The support for this plugin is A1. They have been more than helpful in getting me pointed in the right direction and getting my issues resolved in a timely manner. I would recommend this plugin to anyone looking for a very robust membership plugin.

   Read on wp.org ↗
5. ★★★★★ diegomane

   1.2y ago

   Highly recommended!

   Read on wp.org ↗
6. ★★★★★ ollyw

   1.2y ago

   Had an issue where s2member PayPal buttons were causing a strange intermittent error. Cristian responded promptly to my s2member Pro support request and with his help we sorted the problem. Very grateful :). This topic was modified 11 months, 2 weeks ago by ollyw.

   Read on wp.org ↗
7. ★★★★★ SusanDay

   1.3y ago

   I was lucky enough to get support from Cristian when I got stuck uploading files and making them accessible. His help was insightful and efficient, and I am really grateful. Now, I can utilize all the great benefits this amazing plugin has to offer.

   Read on wp.org ↗
8. ★★★★★ Cosmic

   1.4y ago

   I have been well taken cared of from S2memeber even before buying the Pro version for unlimited sites. It was a great investment and they provided help with some inicial inquirires, and then after buying the plugin they helped me implement a Google reCAPTCHA in Spanish for my members site, and not only that but they used the opportunity to test and implement a new iteration of the plugin to make the process more optimal for future updates. Hands down the best plugin I have purchased for WordPress. They are on top of things. Also, ChatGPT is your friend, give it good prompts and tell it to go through all the S2member support documentation and it will save you time to 🥳

   Read on wp.org ↗

All 15 disclosed vulnerabilities are patched in the current version (261017). Sites still on an older version should update.

1. Patched Medium · 6.4 s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute ↗
   2026-10-27 CVE-2026-109972 Improper Neutralization of Input During Web Page Generation Affects <= 261011 Patched in 261017
2. Patched High · 8.8 s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return ↗
   2026-09-24 CVE-2026-19804 Improper Control of Generation of Code Affects <= 260814 Patched in 260829
3. Patched Medium · 6.4 s2Member <= 260804 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-08-07 CVE-2026-15047 Improper Neutralization of Input During Web Page Generation Affects <= 260804 Patched in 260805
4. Patched Critical · 9.8 s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover ↗
   2026-02-18 CVE-2026-1994 Improper Privilege Management Affects <= 260127 Patched in 260215
5. Patched Medium · 6.4 s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2026-02-18 CVE-2025-13732 Improper Neutralization of Input During Web Page Generation Affects <= 251005 Patched in 260101
6. Patched Critical · 9.8 s2Member <= 250905 - Unauthenticated Remote Code Execution ↗
   2025-10-01 CVE-2025-62023 Improper Control of Generation of Code Affects <= 250905 Patched in 251005
7. Patched High · 8.1 s2Member <= 250701 - Unauthenticated PHP Object Injection ↗
   2025-08-21 CVE-2025-58998 Deserialization of Untrusted Data Affects <= 250701 Patched in 250905
8. Patched High · 7.2 s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion ↗
   2025-04-04 CVE-2025-32137 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 250419 Patched in 250424
9. Patched Medium · 6.1 s2Member Pro <= 241216 - Reflected Cross-Site Scripting ↗
   2025-02-22 CVE-2025-26879 Improper Neutralization of Input During Web Page Generation Affects <= 241216 Patched in 250214
10. Patched Medium · 6.1 s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting ↗
    2025-02-17 CVE-2024-11376 Improper Neutralization of Input During Web Page Generation Affects <= 241216 Patched in 250214
11. Patched High · 8.8 s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241114 - Authenticated (Contributor+) Sensitive Information Exposure ↗
    2024-12-16 CVE-2024-8326 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 241114 Patched in 241216
12. Patched High · 8.1 s2Member (Pro) <= 241114 - Unauthenticated Remote Code Execution ↗
    2024-12-02 CVE-2024-51815 Improper Control of Generation of Code Affects <= 241114 Patched in 241216
13. Patched Critical · 9.1 s2Member <= 240315 - Limited Privilege Escalation ↗
    2024-04-05 CVE-2024-31237 Incorrect Privilege Assignment Affects <= 240315 Patched in 240325
14. Patched Medium · 5.3 s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 230815 - Information Exposure ↗
    2024-03-18 CVE-2024-0899 Improper Access Control Affects <= 230815 Patched in 240315
15. Patched High · 7.2 s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting ↗
    2012-02-12 CVE-2011-5082 Improper Neutralization of Input During Web Page Generation Affects < 111220 Patched in 111220

Automated install-time checks, tested on PHP 7.4.8 · WP 5.6

Translated into 7 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-21 9K+ → 8K+ down after 1 days in tier
2. 2026-05-20 8K+ → 9K+ up after 1 days in tier
3. 2026-05-19 9K+ → 8K+ down after 168 days in tier
4. 2025-12-02 10K+ → 9K+ down after 1353 days in tier
5. 2022-03-20 20K+ → 10K+ down after 1135 days in tier
6. 2019-02-09 30K+ → 20K+ down after 911 days in tier
7. 2016-08-12 40K+ → 30K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions into a readme, a review or a deck. It updates itself.

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions: 8K+ active installs, 4.1★ (234 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/s2member