Plugin icon

Team – Team Members Showcase Plugin

tlp-team

Vulnerabilities:

9

Last Updated:

October 12, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Team < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode
Fixed in
Fixed in 6.0.3
CVSS
5.5 (medium)
Published
2026-09-23
Title
Team – Team Members Showcase Plugin < 6.0.1 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 6.0.1
CVSS
5.3 (medium)
Published
2026-03-23
Title
Team – Team Members Showcase Plugin < 5.0.12 - Missing Authorization
Fixed in
Fixed in 5.0.12
CVSS
5.3 (medium)
Published
2026-02-20
Title
Team < 5.0.14 - Missing Authorization
Fixed in
Fixed in 5.0.14
CVSS
5.3 (medium)
Published
2025-12-15
Title
Team < 5.0.11 - Unauthenticated SQLi
Fixed in
Fixed in 5.0.11
CVSS
8.6 (high)
Published
2025-09-22
Title
Team < 5.0.7 - Missing Authorization
Fixed in
Fixed in 5.0.7
CVSS
5.4 (medium)
Published
2025-02-14
Title
Team – Team Members Showcase Plugin < 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Fixed in
Fixed in 5.0.0
CVSS
4.3 (medium)
Published
2024-09-04
Title
Team Members Showcase < 4.4.2 - Editor+ Stored XSS
Fixed in
Fixed in 4.4.2
CVSS
3.5 (low)
Published
2022-07-27
Title
WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion
Fixed in
Fixed in 4.1.2
CVSS
9.6 (critical)