Lucene search
+L

228 matches found

CNNVD
CNNVD
added 2025/04/17 12:00 a.m.10 views

WordPress plugin Team Members 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

8.8CVSS8.6AI score0.00568EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:00 a.m.8 views

PT-2025-17169 · WordPress · Wp Speedo Team Members

Name of the Vulnerable Software and Affected Versions: WP Speedo Team Members versions 3.4.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For WP Speedo Team Members versions 3.4.0 and earlier, update to a versi...

8.8CVSS8.7AI score0.00568EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/03 3:47 p.m.13 views

CVE-2025-31771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sultan Nasir Uddin Team Members for Elementor Page Builder team-members-for-elementor allows Stored XSS.This issue affects Team Members for Elementor Page Builder: from n/a through = 1.0.4...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 10:04 a.m.19 views

CVE-2025-30802

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through = 2.2...

4.3CVSS7.2AI score0.00366EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.10 views

CVE-2025-31771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sultan Nasir Uddin Team Members for Elementor Page Builder team-members-for-elementor allows Stored XSS.This issue affects Team Members for Elementor Page Builder: from n/a through = 1.0.4...

6.5CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.9 views

CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through = 2.2...

4.3CVSS7.3AI score0.00366EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.41 views

CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through = 2.2...

4.3CVSS0.00366EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.11 views

WordPress plugin Team Members for Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS6.6AI score0.00354EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.12 views

WordPress plugin Our Team Members 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Our Te...

4.3CVSS7.9AI score0.00366EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/03/27 10:52 a.m.11 views

WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Anhchangmutrang in WordPress Plugin Our Team Members versions = 2.2...

4.3CVSS7AI score0.00366EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/15 11:26 a.m.13 views

CVE-2024-13439 Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response function in all versions up to, and including, 4.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

4.3CVSS4.3AI score0.00329EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/02/15 12:00 a.m.33 views

PT-2025-6546 · WordPress · Team Members Showcase Plugin

Name of the Vulnerable Software and Affected Versions: The Team – Team Members Showcase Plugin plugin for WordPress versions up to, and including, 4.4.9 Description: The issue is related to unauthorized access due to a missing capability check on the response function. This allows authenticated...

4.3CVSS9.2AI score0.00329EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2025/02/05 3:20 a.m.15 views

CVE-2024-51763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biplob018 Team Showcase and Slider – Team Members Builder team-showcase-ultimate allows Reflected XSS.This issue affects Team Showcase and Slider – Team Members Builder: from n/a through = 1.3...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.12 views

PT-2024-35223 · Unknown · Team Members

Name of the Vulnerable Software and Affected Versions: Team Member versions n/a through 7.3 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for potential remote file inclusion...

4.3CVSS9.6AI score0.00426EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/09 9:27 a.m.56 views

CVE-2024-51763

CVE-2024-51763 — Reflected XSS in WordPress plugin “Team Showcase and Slider – Team Members Builder.” Exploitation arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected software: Team Showcase and Slider – Team Members Builder, ver...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/09 12:00 a.m.11 views

WordPress plugin Team Showcase and Slider – Team Members Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS7.6AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.10 views

PT-2024-34894 · Unknown · Team Showcase/Slider – Team Members Builder

Name of the Vulnerable Software and Affected Versions: Team Showcase and Slider – Team Members Builder versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

7.1CVSS5.8AI score0.0027EPSS
SaveExploits0References5
NVD
NVD
added 2024/07/20 8:15 a.m.28 views

CVE-2024-38670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Members allows Stored XSS.This issue affects Team Members: from n/a through 5.3.3...

6.5CVSS0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/20 8:00 a.m.21 views

CVE-2024-38670 WordPress Team Members plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Members allows Stored XSS.This issue affects Team Members: from n/a through 5.3.3...

6.5CVSS6.8AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/20 8:00 a.m.63 views

CVE-2024-38670

CVE-2024-38670 is a stored Cross-Site Scripting flaw in the WordPress plugin Team Members (vulnerable through 5.3.3). It arises from improper input neutralization during web page generation, enabling stored XSS. The CVSS v3.1 base score is 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). Patch status i...

6.5CVSS6.4AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder