SportsPress – Sports Club & League Manager vulnerabilities
1 known vulnerability in SportsPress – Sports Club & League Manager from ThemeBoy. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
SportsPress – Sports Club & League Manager: Improper Control of Filename for Include/Require Statement in PHP Program
The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions,