Unauthorized Access Vulnerability in Team Members Showcase Plugin for WordPress
CVE-2024-13439
4.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 15 February 2025
What is CVE-2024-13439?
The Team Members Showcase Plugin for WordPress suffers from an authorization bypass vulnerability due to a missing capability check in the response() function. This flaw exists in all versions up to and including 4.4.9, enabling authenticated users with Subscriber-level access and above to modify plugin settings without proper authorization. This vulnerability poses a significant risk to website security as it can be exploited to alter critical configurations without the necessary permissions.
Affected Version(s)
Team – Team Members Showcase Plugin * <= 4.4.9