WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
team-showcase
Published
2023-10-18
Title
Team Showcase < 2.2 - Contributor+ Stored XSS
Slug
team-showcase
Published
2025-12-30
Title
Team Showcase < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Missing Authorization
Slug
team-showcase-cm
Published
2025-06-26
Title
Team Showcase < 25.05.13 - Reflected Cross-Site Scripting
Slug
team-showcase-supreme
Published
2023-03-21
Title
Team Member < 4.5 - Editor+ Stored Cross-Site Scripting
Slug
team-showcase-supreme
Published
2024-11-11
Title
Team Member < 7.5 - Editor+ Local File Inclusion
Slug
team-showcase-supreme
Published
2026-05-07
Title
Team Members – Multi Language Supported Team Plugin < 8.6 - Authenticated (Editor+) SQL Injection
Slug
team-showcase-supreme
Published
2026-06-29
Title
Team Members < 8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_css' Parameter
Slug
team-showcase-supreme
Published
2026-09-23
Title
Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details
Slug
team-showcase-ultimate
Published
2024-11-04
Title
Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting
Slug
teamleader-form-integration
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
teaser-maker-standard
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
tec-subscriber-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tec-subscriber-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
techlife-cpt
Published
2025-12-30
Title
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Slug
tecslider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tecslider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tectite-forms
Published
2026-06-01
Title
Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update
Slug
teddy-bear-customize-addon
Published
2026-09-09
Title
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Order Data Disclosure
Slug
teddy-bear-customize-addon
Published
2026-09-09
Title
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover
Slug
teddy-bear-customize-addon
Published
2026-09-09
Title
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload
Slug
tedwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tedwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
teleadmin
Published
2024-11-04
Title
TeleAdmin <= 1.0.0 - Reflected Cross-Site Scripting