Skip to contentThemeboy Sportspress vulnerabilities
- themeboy sportspress proWordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerabilityCVE-2026-577497.5 High
- themeboy sportspress – sports club & league managerSportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via ShortcodeCVE-2025-153688.8 High
- themeboy sportspressSportsPress < 2.7.22 - Admin+ Stored XSSCVE-2024-39864.8 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreWordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerabilityCVE-2024-348244.3 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreSportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink UpdateCVE-2024-11785.3 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreSportsPress < 2.7.9 - Reflected Cross-Site ScriptingCVE-2021-245786.1 Medium
- themeboy sportspressThe SportsPress plugin before 2.7.2 for WordPress allows XSS.CVE-2020-138925.4 Medium