Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 4 vulnerability records associated with Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode, published between 2022 and 2025.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

4Total records
0Critical
2High
2Medium
0Low
0Informational
3Patched records
1Currently marked unpatched
2022-06-14First disclosure
2025-09-22Latest disclosure
4 of 4CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202211 records
202411 records
202522 records

Severity Breakdown

SeverityRecordsShare
High250%
Medium250%

Vulnerability-Type Breakdown

Other

2 records50%

First: 2024. Latest: 2025.

Cross-Site Scripting

1 record25%

First: 2022. Latest: 2022.

Missing Authorization

1 record25%

First: 2025. Latest: 2025.

Patch Status

Patched
3
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.2.0
  • 2.1.13
  • 2.0.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-2.3.16Team Manager <= 2.3.16 - Missing AuthorizationSeptember 22, 2025Not suppliedMedium
*-2.1.23Team Manager <= 2.1.23 - Authenticated (Contributor+) Local File InclusionMarch 27, 20252.2.0High
*-2.1.12WordPress Team Manager <= 2.1.12 - Authenticated (Contributor+) Local File InclusionJuly 11, 20242.1.13High
*-2.0.0WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingJune 14, 20222.0.1Medium

Selected source records

Latest Records

MediumCVE-2025-58222

Team Manager <= 2.3.16 - Missing Authorization

Published: September 22, 2025

Affected versions
*-2.3.16
Patched versions
Not supplied
Original Wordfence record
HighCVE-2025-30868

Team Manager <= 2.1.23 - Authenticated (Contributor+) Local File Inclusion

Published: March 27, 2025

Affected versions
*-2.1.23
Patched versions
2.2.0
Original Wordfence record
HighCVE-2024-38704

WordPress Team Manager <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion

Published: July 11, 2024

Affected versions
*-2.1.12
Patched versions
2.1.13
Original Wordfence record
MediumCVE-2022-29406

WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: June 14, 2022

Affected versions
*-2.0.0
Patched versions
2.0.1
Original Wordfence record

Highest-Severity Records

HighCVE-2024-38704

WordPress Team Manager <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion

Published: July 11, 2024

Affected versions
*-2.1.12
Patched versions
2.1.13
Original Wordfence record
HighCVE-2025-30868

Team Manager <= 2.1.23 - Authenticated (Contributor+) Local File Inclusion

Published: March 27, 2025

Affected versions
*-2.1.23
Patched versions
2.2.0
Original Wordfence record
MediumCVE-2025-58222

Team Manager <= 2.3.16 - Missing Authorization

Published: September 22, 2025

Affected versions
*-2.3.16
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2022-29406

WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: June 14, 2022

Affected versions
*-2.0.0
Patched versions
2.0.1
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2025-58222

Team Manager <= 2.3.16 - Missing Authorization

Published: September 22, 2025

Affected versions
*-2.3.16
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory