Skip to content
OpenAdvisories

Vendor

cmoreira

6 known vulnerabilities.

Products

Team Showcase 3 Testimonials Showcase 2 Interactive World Maps 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-49248

    WordPress Team Showcase plugin < 25.05.13 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Showcase: from n/a through < 25.05.13.

    cmoreira Team Showcase
  • Medium 4.3
    CVE-2025-49250

    WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through < 25.05.13.

    cmoreira Team Showcase
  • Medium 4.3
    CVE-2025-49246

    WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonials Showcase: from n/a through <= 1.9.16.

    cmoreira Testimonials Showcase
  • Medium 6.1
    CVE-2024-3681

    Interactive World Maps <= 2.4.14 - Reflected Cross-Site Scripting

    The Interactive World Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search (s) parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for un…

    cmoreira Interactive World Maps Web / CMS