Advisories · Technology

themeboy SportsPress – Sports Club & League Manager.

Every CVE that names themeboy SportsPress – Sports Club & League Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-15368 CVE record

CVSS 8.8 High

SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- themeboy SportsPress – Sports Club & League Manager
- File inclusion
Not analysed yet 4 Feb 2026
CVE-2024-34824 CVE record

CVSS 4.3 Medium

WordPress SportsPress – Sports Club & League Manager plugin <= 2.7.20 - Broken Access Control vulnerability
- ThemeBoy SportsPress – Sports Club & League Manager
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-1178 CVE record

CVSS 5.3 Medium

SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update
- themeboy SportsPress – Sports Club & League Manager
- Broken access control
Not analysed yet 5 Mar 2024