WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
team-members
Published
2024-02-26
Title
Team Members < 5.3.2 - Author+ Stored XSS
Slug
team-members
Published
2024-07-10
Title
Team Members < 5.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-members
Published
2025-09-26
Title
Team Members < 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-members-for-elementor
Published
2025-04-01
Title
Team Members for Elementor Page Builder <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-rosters
Published
2024-11-18
Title
Team Rosters <= 4.8.2 - Unauthenticated PHP Object Injection
Slug
team-rosters
Published
2025-01-30
Title
Team Rosters < 4.8 - Reflected Cross-Site Scripting via 'tab'
Slug
team-rosters
Published
2025-04-02
Title
Team Rosters < 4.8 - Reflected Cross-Site Scripting
Slug
team-section
Published
2025-02-23
Title
Team Section Block < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-section
Published
2026-01-16
Title
Team Section Block < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link
Slug
team-showcase
Published
2023-10-18
Title
Team Showcase < 2.2 - Contributor+ Stored XSS
Slug
team-showcase
Published
2025-12-30
Title
Team Showcase < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
team-showcase-cm
Published
2025-06-05
Title
Team Showcase < 25.05.13 - Missing Authorization
Slug
team-showcase-cm
Published
2025-06-26
Title
Team Showcase < 25.05.13 - Reflected Cross-Site Scripting
Slug
team-showcase-supreme
Published
2023-03-21
Title
Team Member < 4.5 - Editor+ Stored Cross-Site Scripting
Slug
team-showcase-supreme
Published
2024-11-11
Title
Team Member < 7.5 - Editor+ Local File Inclusion
Slug
team-showcase-ultimate
Published
2024-11-04
Title
Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting
Slug
teamleader-form-integration
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
teaser-maker-standard
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
tec-subscriber-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tec-subscriber-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
techlife-cpt
Published
2025-12-30
Title
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Slug
tecslider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tecslider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tedwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius