Team – Team Members Showcase Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Team – Team Members Showcase Plugin

Information

Software Type Plugin
Software Slug tlp-team (view on wordpress.org)
Software Status Active
Software Author techlabpro1
Software Website radiustheme.com
Software Downloads 556,610
Software Active Installs 10,000
Software Record Last Updated October 11, 2026

9 Vulnerabilities

Submit a Vulnerability
Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode
6.4
CVE-2026-102402
Oct 9, 2026
Researcher: Wordfence PRISM
Team – Team Members Showcase Plugin <= 6.0.0 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2026-95592
Sep 23, 2026
Researcher: Ihsan Saddan
Team – Team Members Showcase Plugin <= 5.0.11 - Missing Authorization
5.3
CVE-2026-25026
Mar 23, 2026
Researcher: Doan Dinh Van (d52v)
Team <= 5.0.13 - Missing Authorization
5.3
CVE-2026-32396
Feb 20, 2026
Researcher: Nguyen Ba Khanh
Team <= 5.0.10 - Unauthenticated SQL Injection
7.5
CVE-2025-14124
Dec 15, 2025
Researcher: Alex Tselevich (nos3curity)
Team <= 5.0.6 - Missing Authorization
5.4
CVE-2025-57975
Sep 22, 2025
Researcher: Que Thanh Tuan - Blue Rock
Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update
4.3
CVE-2024-13439
Feb 14, 2025
Researcher: abrahack
Team – Team Members Showcase Plugin <= 4.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-9236
Oct 3, 2024
Researcher: Krugov Artyom
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion
7.5
CVE-2022-2557
Jul 29, 2022
Researcher: Nhật Nam
Title Status CVE ID CVSS Researchers Date
Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode Patched CVE-2026-102402 6.4 Wordfence PRISM October 9, 2026
Team – Team Members Showcase Plugin <= 6.0.0 - Unauthenticated Insecure Direct Object Reference Patched CVE-2026-95592 5.3 Ihsan Saddan September 23, 2026
Team – Team Members Showcase Plugin <= 5.0.11 - Missing Authorization Patched CVE-2026-25026 5.3 Doan Dinh Van (d52v) March 23, 2026
Team <= 5.0.13 - Missing Authorization Patched CVE-2026-32396 5.3 Nguyen Ba Khanh February 20, 2026
Team <= 5.0.10 - Unauthenticated SQL Injection Patched CVE-2025-14124 7.5 Alex Tselevich (nos3curity) December 15, 2025
Team <= 5.0.6 - Missing Authorization Patched CVE-2025-57975 5.4 Que Thanh Tuan - Blue Rock September 22, 2025
Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update Patched CVE-2024-13439 4.3 abrahack February 14, 2025
Team – Team Members Showcase Plugin <= 4.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-9236 4.4 Krugov Artyom October 3, 2024
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion Patched CVE-2022-2557 7.5 Nhật Nam July 29, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation