Pickplugins Team Showcase — known CVE vulnerabilities

Every CVE whose affected-product data names Pickplugins Team Showcase, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-35936 — CVSS 7.5 (high): Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers…
• CVE-2020-35937 — CVSS 7.5 (high): Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated…
• CVE-2020-35938 — CVSS 7.5 (high): PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject…
• CVE-2020-35939 — CVSS 7.5 (high): PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to…
• CVE-2024-44002 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase team allows…