AntoineH Football Pool

• CVE-2026-118050 Medium 6.4 Football Pool <= 2.13.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shoutbox Message –
• CVE-2026-8790 Medium 6.1 Football Pool <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scripting 0.4%
• CVE-2025-58987 Medium 6.5 WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-53280 Medium 6.5 WordPress Football Pool plugin <= 2.12.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2025-5490 Medium 5.5 Football Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2025-30764 Medium 4.3 WordPress Football Pool plugin <= 2.12.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%