Theme Junkie Team Content
Theme Junkie Team Content has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Theme Junkie Team Content has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Ngoc Quang Bach (maysbachs). Theme Junkie Team Content is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2025-53301Theme Junkie Team Content <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Theme Junkie Team Content
Author
Theme Junkie
This plugin adds a team custom post type to your WordPress website to manage your teams. It should work with any WordPress themes but you need to create templates for archive-member.php and single-member.php to display the team data. It has built-in meta boxes to add more data to the member’s page such as: Avatar uploader Team position 5 social link profile Plugin Info Developed by Theme Junkie Check out the Github repo to contribute.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C