What’s Vulnerable › Products

themeboy SportsPress – Sports Club & League Manager vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your themeboy SportsPress – Sports Club & League Manager version is affected

Latest themeboy SportsPress – Sports Club & League Manager vulnerabilities

• CVE-2025-15368 — SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode (CVSS 8.8)
• CVE-2024-3986 — SportsPress < 2.7.22 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-34824 — WordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2024-1178 — SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update (CVSS 5.3)
• CVE-2021-24578 — SportsPress < 2.7.9 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2020-13892 — (CVSS 5.4)