cleantalk
Vulnerabilities and Security Researches

Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder, CVE-2025-11560

CVE, Research URL

CVE-2025-11560

Published on
Nov 12, 2025
Research Description
The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it back in the page, leading to reflected cross-site scripting, which could be used against high-privilege users such as admins.
Affected versions
max 3.5.0.
Status
vulnerable