CVE-2026-0833

Name of the Vulnerable Software and Affected Versions Team Section Block plugin for WordPress versions prior to 2.1.0

Description The software contains a flaw due to inadequate input sanitization and output escaping on user-supplied social network link URLs. This allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses an injected page. The issue is a Stored Cross-Site Scripting condition.

Recommendations Update the Team Section Block plugin to version 2.1.0 or later.