Team showcase
This hub aggregates every CVE we track for Team showcase, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
12
CVEs tracked
0
Critical
6
High
0
In CISA KEV
Severity distribution
HIGH6MEDIUM6
Monthly trend
1
0
0
0
0
0
0
0
0
2
1
0
0
0
0
0
1
0
0
0
1
0
0
0
2024-092026-08
Latest CVEs
The 12 most recently published vulnerabilities affecting Team showcase.
- CVE-2025-62745WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-69335WordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-49247WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2025-49250WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability4.3
- CVE-2025-49248WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability4.3
- CVE-2024-44002WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-43321WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2023-5639Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
- CVE-2020-35939PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of...7.5
- CVE-2020-35938PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data...7.5
- CVE-2020-35937Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a...7.5
- CVE-2020-35936Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remo...7.5
Product normalization is registry-driven with AI assist and human review. How it works