Skip to content
OpenAdvisories

Vendor

ThemeBoy

5 known vulnerabilities.

Products

SportsPress – Sports Club & League Manager 3 Hide Plugins 1 SportsPress Pro 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-57749

    WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability

    Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.

    ThemeBoy SportsPress Pro
  • High 8.8
    CVE-2025-15368

    SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions,…

    ThemeBoy SportsPress – Sports Club & League Manager Web / CMS