Cross-site Scripting Vulnerability in Team Showcase by Themepoints

CVE-2025-69335

What is CVE-2025-69335?

The Team Showcase plugin by Themepoints contains a vulnerability that permits stored Cross-site Scripting (XSS) attacks, which could allow an attacker to inject malicious scripts. This vulnerability arises from improper input neutralization during web page generation. Versions of the plugin up to 2.9 are susceptible, leading to potential exposure of user data and administrative actions being compromised. Users are advised to update to the latest version to safeguard against this security threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References