CVE-2025-30802: 
WordPress vulnerability analysis and mitigation

The WordPress Our Team Members plugin versions up to and including 2.2 contains a Sensitive Data Exposure vulnerability. The vulnerability was discovered on February 22, 2025, and publicly disclosed on March 27, 2025. This security issue affects the WPBean Our Team Members plugin installations from unspecified versions through version 2.2 (Patchstack).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. The issue has been classified under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability requires subscriber-level privileges to exploit (Patchstack).

This vulnerability could allow a malicious actor to view sensitive information that is normally not available to regular users. The exposed information could potentially be used to exploit other weaknesses in the system (Patchstack).

The vulnerability has been fixed in version 2.3 of the WordPress Our Team Members plugin. Users are advised to update to version 2.3 or later to remove the vulnerability. Patchstack users can enable auto-update functionality for vulnerable plugins (Patchstack).