Plugin icon

Football Pool

football-pool

Vulnerabilities:

9

Last Updated:

May 20, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-04
Title
Football Pool < 2.13.5 - Authenticated (Subscriber+) Reflected Cross-Site Scripting
Fixed in
Fixed in 2.13.5
CVSS
5.4 (medium)
Published
2025-09-09
Title
Football Pool < 2.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.13.0
CVSS
6.4 (medium)
Published
2025-06-27
Title
Football Pool < 2.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.12.6
CVSS
6.4 (medium)
Published
2025-06-18
Title
Football Pool < 2.12.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.12.5
CVSS
5.5 (medium)
Published
2025-03-26
Title
Football Pool < 2.12.3 - Cross-Site Request Forgery to Settings Update
Fixed in
Fixed in 2.12.3
CVSS
4.3 (medium)
Published
2024-08-07
Title
Football Pool < 2.12.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.12.1
CVSS
4.4 (medium)
Published
2024-08-07
Title
Football Pool < 2.11.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.11.10
CVSS
6.4 (medium)
Published
2024-01-08
Title
Football pool < 2.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.11.4
CVSS
6.4 (medium)
Published
2017-12-24
Title
Football Pool < 2.6.5 - Multiple XSS
Fixed in
Fixed in 2.6.5
CVSS
6.1 (medium)