Team – Team Members Showcase Plugin vulnerabilities

Plugin slug tlp-team · 9 known vulnerabilities · latest disclosed 2026-10-09 · WordPress.org page

Every listed vulnerability has a fix. Version 6.0.3 or later is not affected by any of them. If your site runs an older version, update it.

2 of 9 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Team – Team Members Showcase Plugin

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 6.4<= 6.0.26.0.3CVE-2026-1024022026-10-09Advisory
Medium 5.3<= 6.0.06.0.1CVE-2026-955922026-09-23Advisory
Medium 5.3<= 5.0.115.0.12CVE-2026-250262026-03-23Advisory
Medium 5.3<= 5.0.135.0.14CVE-2026-323962026-02-20Advisory
High 7.5<= 5.0.105.0.11CVE-2025-141242025-12-15Advisory
Medium 5.4<= 5.0.65.0.7CVE-2025-579752025-09-22Advisory
Medium 4.3<= 4.4.95.0.0CVE-2024-134392025-02-14Advisory
Medium 4.4<= 4.4.14.4.2CVE-2024-92362024-10-03Advisory
High 7.5<= 4.1.14.1.2CVE-2022-25572022-07-29Advisory

Check if a site is affected

Enter a site address to see which version of Team – Team Members Showcase Plugin and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Team – Team Members Showcase Plugin plugin safe to use?

All 9 known issues are fixed in current versions (6.0.3 or later). Keeping it updated is what matters.

How do I check which version of Team – Team Members Showcase Plugin my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome