Team Members

Team Members has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (100%).

Every one of the 5 issues recorded for Team Members has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by lucy. Team Members is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Team Members vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-8440

Team Members <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2025-09-26 13:33	Team Members <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Team Members <= 5.3.5	`CVE-2025-8440`	6.4 Medium	zer0gh0st	Yes
2024-07-10 00:00	Team Members <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Team Members <= 5.3.3	`CVE-2024-38670`	6.4 Medium	Jean Tirstan T	Yes
2024-02-26 00:00	Team Members <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Team Members <= 5.3.1	`CVE-2024-1331`	6.4 Medium	Dmitrii Ignatyev	Yes
2022-12-09 00:00	Team Members <= 5.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting Team Members <= 5.2.0	`CVE-2022-3936`	5.5 Medium	lucy	Yes
2022-05-09 00:00	Team Members <= 5.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting Team Members <= 5.1.0	`CVE-2022-1568`	5.5 Medium	lucy	Yes

Showing 1–5 of 5 reports

Latestv5.4.1

Team Members

Author

WP Darko

4.2(53)

84/100

Last Updated

2026-01-29 (8mo ago)

Active Installs

20,000+

Downloads

774,726

Requires WP

3.6+

Requires PHP

Tested up to

WP 6.9.7

Created

2015-01-24 (12y ago)

This plugin adds a “Teams” section to the admin panel which allows you to showcase your staff/employees/people on your website the easy way. You can quickly add members to your team(s), add their picture, position, bios, social links, re-order them at anytime and display them anywhere with a simple shortcode. What you see is what you get, and it’s totally free. [Compatible with PHP 8.] No limitation for the Free version The free version of the Team Members plugin is not limited. Available fields Firstname Lastname Description/bio Photo Social links (FB, X, Instagra, etc.) Available settings Number of members to show per line (1 to 5) Display order (default/random) Color PRO features New picture on hover Member height equalizing Import/export members from one team to another Full-width pictures Hide members More info reveal box Picture filters Per-member color Two more social links per member Check out our PRO version, see all these features in action. Usage Go to the plugin’s documentation if you need more information on how to use this plugin. Support Find help on our support platform for this plugin (we’ll answer you fast, promise).

View on WordPress.org