Vulnerabilities and security researches forwps-team wps-team

Apr 19, 2025

CVE, Research URL: CVE-2025-32686
Home page URL: Security reports for Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
Application: Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
Date: Apr 17, 2025
Research Description: Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection. This issue affects Team Members: from n/a through 3.4.0.
Affected versions: Min -, max -.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: a5114dd9802b1d5676e2152ac8a3d619ab269b38
Home page URL: Security reports for Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
Application: Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder
Date: Jul 18, 2023
Research Description: Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder [wps-team] < 2.8.3 WordPress Team Members â Best WordPress Team Plugin with Live Team Builder Plugin < 2.8.3 is vulnerable to Cross Site Scripting (XSS) Update the plugin to the latest version. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Team Members â Best WordPress Team Plugin with Live Team Builder Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 2.8.3.
Affected versions: Min -, max -.
Status: vulnerable