Skip to content
Themeboy vulnerabilities
Newest
-
themeboy sportspress pro
WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability
CVE-2026-57749
7.5 High
-
themeboy sportspress – sports club & league manager
SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-15368
8.8 High
-
themeboy hide plugins
WordPress Hide Plugins plugin <= 1.0.4 - Broken Access Control vulnerability
CVE-2025-62115
4.3 Medium
-
themeboy sportspress
SportsPress < 2.7.22 - Admin+ Stored XSS
CVE-2024-3986
4.8 Medium
-
themeboy sportspress, sportspress – sports club & league manager +1 more
WordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability
CVE-2024-34824
4.3 Medium
-
themeboy sportspress, sportspress – sports club & league manager +1 more
SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update
CVE-2024-1178
5.3 Medium
-
themeboy sportspress, sportspress – sports club & league manager +1 more
SportsPress < 2.7.9 - Reflected Cross-Site Scripting
CVE-2021-24578
6.1 Medium
-
themeboy sportspress
The SportsPress plugin before 2.7.2 for WordPress allows XSS.
CVE-2020-13892
5.4 Medium