Vulnerabilities and security researches forwps-team wps-team
Direction: ascendingJun 07, 2024
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder # a5114dd9802b1d5676e2152ac8a3d619ab269b38
- CVE, Research URL
- Home page URL
- Application
-
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
- Date
- Jul 18, 2023
- Research Description
- Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder [wps-team] < 2.8.3 WordPress Team Members â Best WordPress Team Plugin with Live Team Builder Plugin < 2.8.3 is vulnerable to Cross Site Scripting (XSS) Update the plugin to the latest version. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Team Members â Best WordPress Team Plugin with Live Team Builder Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 2.8.3.
- Affected versions
-
max 2.8.3.
- Status
-
vulnerable
Apr 19, 2025
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder # CVE-2025-32686
- CVE, Research URL
- Home page URL
- Application
-
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
- Date
- Apr 17, 2025
- Research Description
- Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection. This issue affects Team Members: from n/a through 3.4.0.
- Affected versions
-
max 3.4.0.
- Status
-
vulnerable
May 05, 2025
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder # CVE-2025-3521
- CVE, Research URL
- Home page URL
- Application
-
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
- Date
- May 01, 2025
- Research Description
- The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Affected versions
-
max 3.4.0.
- Status
-
vulnerable
Dec 11, 2025
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder # CVE-2025-11560
- CVE, Research URL
- Home page URL
- Application
-
Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
- Date
- Nov 12, 2025
- Research Description
- The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it back in the page, leading to reflected cross-site scripting, which could be used against high-privilege users such as admins.
- Affected versions
-
max 3.5.0.
- Status
-
vulnerable