Mark O'Donnell

Products

ProductCVEsExploitedLatest
MSTW League Manager2–Apr 2, 2026
Team Rosters2–Apr 3, 2025
MSTW CSV EXPORTER1–Oct 27, 2025

Exploited and recent CVEs

  • CVE-2026-34890 Medium 6.5 WordPress MSTW League Manager plugin <= 2.10 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-62944 Medium 5.3 WordPress MSTW CSV EXPORTER plugin <= 1.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-58852 High 7.1 WordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-31905 High 7.1 WordPress Team Rosters Plugin <= 4.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-52439 Critical 9.8 WordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability 0.6%