ThemeBoy

Products

ProductCVEsExploitedLatest
SportsPress – Sports Club & League Manager3–Feb 4, 2026
Hide Plugins1–Dec 31, 2025
SportsPress Pro1–Jul 2, 2026

Exploited and recent CVEs

  • CVE-2026-57749 High 7.5 WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-15368 High 8.8 SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.8%
  • CVE-2025-62115 Medium 4.3 WordPress Hide Plugins plugin <= 1.0.4 - Broken Access Control vulnerability 0.2%
  • CVE-2024-34824 Medium 4.3 WordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability 0.2%
  • CVE-2024-1178 Medium 5.3 SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update 0.4%