ThemeBoy vulnerabilities
We track 1 vulnerability in ThemeBoy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest ThemeBoy vulnerabilities
- 8.8 High severity
SportsPress – Sports Club & League Manager: Improper Control of Filename for Include/Require Statement in PHP Program
The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions,