Skip to content
OpenAdvisories

Vendor

antoineh

6 known vulnerabilities.

Products

Football Pool 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118050

    Football Pool <= 2.13.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shoutbox Message

    The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shouttext' parameter in all versions up to, and including, 2.13.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    antoineh Football Pool Web / CMS
  • Medium 6.1
    CVE-2026-8790

    Football Pool <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scripting

    The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `shouttext` POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. When a sh…

    antoineh Football Pool Web / CMS
  • Medium 6.5
    CVE-2025-58987

    WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through <= 2.12.6.

    antoineh Football Pool
  • Medium 6.5
    CVE-2025-53280

    WordPress Football Pool plugin <= 2.12.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through <= 2.12.5.

    antoineh Football Pool
  • Medium 5.5
    CVE-2025-5490

    Football Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

    antoineh Football Pool Web / CMS
  • Medium 4.3
    CVE-2025-30764

    WordPress Football Pool plugin <= 2.12.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in AntoineH Football Pool football-pool allows Cross Site Request Forgery.This issue affects Football Pool: from n/a through <= 2.12.2.

    antoineh Football Pool