Plugin icon

SportsPress – Sports Club & League Manager

sportspress

Vulnerabilities:

6

Last Updated:

February 12, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-03
Title
SportsPress < 2.7.27 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Fixed in
Fixed in 2.7.27
CVSS
8.8 (high)
Published
2024-07-09
Title
SportsPress < 2.7.22 - Admin+ Stored XSS
Fixed in
Fixed in 2.7.22
CVSS
3.5 (low)
Published
2024-05-09
Title
SportsPress – Sports Club & League Manager < 2.7.21 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 2.7.21
CVSS
3.5 (low)
Published
2024-03-04
Title
SportsPress – Sports Club & League Manager < 2.7.18 - Missing Authorization to Unauthenticated Event Permalink Update
Fixed in
Fixed in 2.7.18
CVSS
5.3 (medium)
Published
2021-11-16
Title
SportsPress < 2.7.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.7.9
CVSS
8.8 (high)
Published
2020-06-07
Title
SportsPress < 2.7.2 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.7.2
CVSS
7.2 (high)