Known vulnerabilities in the Team plugin

6 security advisories have been published for the Team plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Team - SQL Injection (CVE-2025-14124) HIGH 2026-01-05
Team - Cross-Site Scripting (XSS) (CVE-2024-9236) MEDIUM 2025-05-15
Team - Broken Access Control (CVE-2024-13439) MEDIUM 2025-02-15
Team - Path Traversal (CVE-2022-2557) HIGH 2022-08-22
Team - Cross-Site Scripting (XSS) (CVE-2022-34853) MEDIUM 2022-07-22
Team - Cross-Site Scripting (XSS) (CVE-2022-34650) MEDIUM 2022-07-22

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.