CVE-2026-102402

Name of the Vulnerable Software and Affected Versions The Team – Team Members Showcase Plugin versions prior to 6.0.3

Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts via the ttp filter taxonomy (meta of the attacker-chosen post) parameter, which execute when a user visits the affected page.

Recommendations Update the plugin to version 6.0.3 or later.