WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
CVSS 3.1 score
Not reported to be exploited
Cross Site Scripting (XSS)
OWASP Top 10
A7: Cross-Site Scripting (XSS)
Requires contributor or higher role user authentication.
Patchstack vPatch available since
Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities were discovered by m0ze (Patchstack) in the WordPress Team plugin (versions <= 1.2.6).
Deactivate and delete. This plugin has been closed as of May 3, 2022 and is not available for download. Reason: Licensing/Trademark Violation. No fixed version is available.