ThemeBoy
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SportsPress – Sports Club & League Manager | 3 | – | Feb 4, 2026 |
| Hide Plugins | 1 | – | Dec 31, 2025 |
| SportsPress Pro | 1 | – | Jul 2, 2026 |
Exploited and recent CVEs
- CVE-2026-57749 WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability 0.4%
- CVE-2025-15368 SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.8%
- CVE-2025-62115 WordPress Hide Plugins plugin <= 1.0.4 - Broken Access Control vulnerability 0.2%
- CVE-2024-34824 WordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability 0.2%
- CVE-2024-1178 SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update 0.4%