WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
team-showcase
Published
2025-12-30
Title
Team Showcase < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Missing Authorization
Slug
team-showcase-cm
Published
2025-06-26
Title
Team Showcase < 25.05.13 - Reflected Cross-Site Scripting
Slug
team-showcase-supreme
Published
2023-03-21
Title
Team Member < 4.5 - Editor+ Stored Cross-Site Scripting
Slug
team-showcase-supreme
Published
2024-11-11
Title
Team Member < 7.5 - Editor+ Local File Inclusion
Slug
team-showcase-ultimate
Published
2024-11-04
Title
Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting
Slug
teamleader-form-integration
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
teaser-maker-standard
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
tec-subscriber-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tec-subscriber-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
techlife-cpt
Published
2025-12-30
Title
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Slug
tecslider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tecslider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tedwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tedwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
teleadmin
Published
2024-11-04
Title
TeleAdmin <= 1.0.0 - Reflected Cross-Site Scripting
Slug
telecash-ricaricaweb
Published
2024-10-09
Title
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Slug
telefication
Published
2021-09-21
Title
Telefication <= 1.8.0 - Open Relay & Server-Side Request Forgery
Slug
telegram-bot
Published
2023-05-29
Title
Telegram Bot & Channel < 3.6.3 - Admin+ Stored XSS
Slug
telegram-bot
Published
2024-07-20
Title
Telegram Bot & Channel < 4.0.1 - Cross-Site Request Forgery
Slug
telegram-bot
Published
2025-11-24
Title
Telegram Bot & Channel < 4.1.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
Slug
telegram-for-wp
Published
2025-06-12
Title
Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
telephone-number-linker
Published
2023-11-06
Title
Telephone Number Linker <= 1.2 - Contributor+ Stored XSS
Slug
teleport
Published
2025-03-24
Title
Teleport <= 1.2.4 - Reflected Cross-Site Scripting