Themepoints vulnerabilities

Products

• Team Showcase 7
• Accordion 4
• Super Testimonials 4
• Logo Showcase 3
• Carousel Ultimate 2
• Super Testimonial – Testimonial & Customer Review Slider Plugin For Wordpress 2
• Tab Ultimate 2
• Testimonials 2
• Testimonials (wordpress Plugin) 2

Newest

• themepoints logo showcase WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-105060 6.5 MediumOctober 5, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-66471 6.5 MediumAugust 13, 2026
• pickplugins team showcase WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability CVE-2025-62745 6.5 MediumMay 25, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-69350 5.9 MediumJanuary 6, 2026
• themepoints team showcase WordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-69335 6.5 MediumJanuary 6, 2026
• themepoints tab ultimate WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-62060 6.5 MediumOctober 22, 2025
• themepoints carousel ultimate WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58652 6.5 MediumSeptember 22, 2025
• themepoints logo showcase WordPress Logo Showcase plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-58684 6.5 MediumSeptember 22, 2025
• themepoints carousel ultimate WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58820 5.9 MediumSeptember 5, 2025
• cmoreira team showcase WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-49247 7.1 HighJuly 4, 2025
• cmoreira team showcase WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability CVE-2025-49250 4.3 MediumJune 6, 2025
• cmoreira team showcase WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability CVE-2025-49248 4.3 MediumJune 6, 2025
• themepoints logo showcase WordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47497 6.5 MediumMay 7, 2025
• themepoints super testimonials, super testimonial – testimonial & customer review slider plugin for wordpress +1 more Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting CVE-2024-13704 7.2 HighFebruary 18, 2025
• themepoints skill bar WordPress Skill Bar Plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-22805 6.5 MediumJanuary 9, 2025
• themepoints service box Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12699 6.4 MediumJanuary 7, 2025
• codecabin super testimonials Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter CVE-2024-9127 6.4 MediumSeptember 26, 2024
• themepoints testimonials WordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43959 7.1 HighSeptember 25, 2024
• pickplugins team showcase WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-44002 7.1 HighSeptember 17, 2024
• pickplugins team showcase WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability CVE-2024-43321 6.5 MediumAugust 18, 2024
• themepoints testimonials WordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-31348 6.5 MediumApril 7, 2024
• pickplugins accordion WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47809 5.9 MediumNovember 22, 2023
• themepoints tab ultimate Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5667 6.4 MediumNovember 22, 2023
• themepoints accordion, accordions – responsive accordion & faq plugin for wordpress +1 more Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5666 6.4 MediumOctober 30, 2023
• themepoints super testimonials, super testimonial – testimonial & customer review slider plugin for wordpress +1 more Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5613 6.4 MediumOctober 20, 2023
• themepoints team showcase, team showcase – responsive team members grid, slider & carousel plugin +1 more Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5639 6.4 MediumOctober 19, 2023
• unknown testimonials, themepoints super testimonials, unknown testimonial pro +2 more Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting CVE-2022-3539 4.8 MediumNovember 14, 2022
• themepoints super testimonials, testimonials (wordpress plugin) +1 more WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability CVE-2021-36858 4.8 MediumOctober 28, 2022
• testimonials project testimonials, chinmoy paul (chinmoy29) testimonials (wordpress plugin) +1 more WordPress Testimonials plugin <= 3.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-33191 4.1 MediumJuly 22, 2022