wpspeedo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wpspeedo records in CISA KEV

No wpspeedo vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-23751 CVE-2025-32686 · GHSA-6wpm-4j63-64j7

WordPress Team Members plugin <= 3.4.4 - PHP Object Injection Vulnerability

MEDIUM 41

Deserialization of Untrusted Data vulnerability in WPSpeedo Team Members wps-team allows Object Injection.This issue affects Team Members: from n/a through <= 3.4.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00603 Published 2025-04-17 No fix listed CWE-502

TI-2025-03093 CVE-2025-3521 · GHSA-gv2r-xmgw-w3fm

Cross-site scripting in wpspeedo Team Members Showcase

LOW 28

The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00305 Published 2025-05-01 No fix listed CWE-80

TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0