Plugin icon

Team Members Showcase

wps-team

Vulnerabilities:

5

Last Updated:

May 21, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 3.3.2
CVSS
7.1 (high)
Published
2025-10-22
Title
Team Members Showcase < 3.5.0 - Reflected XSS
Fixed in
Fixed in 3.5.0
CVSS
7.1 (high)
Published
2025-04-30
Title
Team Members < 3.4.2 - Contributor+ Stored XSS
Fixed in
Fixed in 3.4.2
CVSS
5.9 (medium)
Published
2025-04-15
Title
Team Members < 3.4.5 - Contributor+ PHP Object Injection
Fixed in
Fixed in 3.4.5
CVSS
7.5 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.8.0
CVSS
6.1 (medium)