Vulnerabilities / Team Manager
Team Manager vulnerabilities
Advisories WPSec published for Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode. Other sources may list more. Its attack surface: Team Manager on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1365 | Team Manager <= 2.6.8 - Unauthenticated Sensitive Information Exposure via Debug Log File | Low 3.7 | 2.6.9 |
| 2026-10-21 | WPSEC-2026-1364 | Team Manager <= 2.6.8 - Authenticated (Contributor+) CSS Injection via 'bg_color' and 'social_color' Shortcode Attributes | Medium 5.0 | 2.6.9 |
| 2026-10-07 | WPSEC-2026-0535 | Team Manager <= 2.6.7 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure via dwl_create_team Shortcode | Medium 4.3 | 2.6.8 |
| 2026-10-07 | WPSEC-2026-0534 | Team Manager <= 2.6.7 - Unauthenticated Sensitive Information Exposure via Password-Protected Team Members | Medium 5.3 | 2.6.8 |
License: CC BY 4.0