CVE-2026-110369

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

EUVD-2026-107158

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110369

The WordPress Team Members – GS Plugins (gs-team-members) plugin is vulnerable to a PHP Object Injection flaw in versions

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

PT-2026-120511

Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2...

WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WordPress Team Members – GS Plugins versions = 2.8.2...

CVE-2026-102402

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttpfiltertaxonomy meta of the attacker-chosen post' parameter in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-102402

The Team – Team Members Showcase Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.0.2 . The root cause is insufficient input sanitization and output escaping regarding the 'ttp_filter_taxonomy' parameter (meta of an attacker-chosen post...

CVE-2026-102402 Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttpfiltertaxonomy meta of the attacker-chosen post' parameter in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-96212

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttpfiltertaxonomy meta of the attacker-chosen post' parameter in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it...

PT-2026-109548

Name of the Vulnerable Software and Affected Versions The Team – Team Members Showcase Plugin versions prior to 6.0.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. This ...

CVE-2026-102402: Improper Neutralization of Input During Web Page Generation

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttpfiltertaxonomy meta of the attacker-chosen post' parameter in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it...

WordPress Team – Team Members Showcase Plugin plugin <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Team versions = 6.0.2...

CVE-2026-11871

The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

WordPress Team Members plugin <= 9.2 - Unauthenticated Sensitive Data Disclosure vulnerability

Unauthenticated Sensitive Data Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Team Member versions = 9.3...

CVE-2026-11871

The Team Members WordPress plugin (version

EUVD-2026-87528

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

CVE-2026-11871 Team Showcase Supreme <= 9.2 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

CVE-2026-11871: Exposure of Sensitive Information to an Unauthorized Actor

The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...