WordPress plugin
SportsPress – Sports Club & League Manager security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium4
- Low1
All SportsPress – Sports Club & League Manager vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Contributor+) Local File Inclusion via Shortcode ≤2.7.26Update to 2.7.27 | CVE-2025-15368 | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤2.7.21Update to 2.7.22 | CVE-2024-3986 | |
| Low3.5 | Missing Authorization to Notice Dismissal ≤2.7.20Update to 2.7.21 | CVE-2024-34824 | |
| Medium5.3 | Missing Authorization to Unauthenticated Event Permalink Update ≤2.7.17Update to 2.7.18 | CVE-2024-1178 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.7.8Update to 2.7.9 | CVE-2021-24578 | |
| Medium5.4 | Cross-Site Scripting <2.7.2Update to 2.7.2 | CVE-2020-13892 |
- High8.8Authenticated (Contributor+) Local File Inclusion via Shortcode
≤2.7.26Update to 2.7.27
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤2.7.21Update to 2.7.22
- Low3.5Missing Authorization to Notice Dismissal
≤2.7.20Update to 2.7.21
- Medium5.3Missing Authorization to Unauthenticated Event Permalink Update
≤2.7.17Update to 2.7.18
- Medium6.1Reflected Cross-Site Scripting
≤2.7.8Update to 2.7.9
- Medium5.4Cross-Site Scripting
<2.7.2Update to 2.7.2
SportsPress – Sports Club & League Manager: common questions
Does SportsPress – Sports Club & League Manager have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in SportsPress – Sports Club & League Manager: 1 high, 4 medium, 1 low. None are known to affect version null.
How do I check which version of SportsPress – Sports Club & League Manager I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SportsPress – Sports Club & League Manager vulnerability?
CVE-2025-15368, published Feb 3, 2026: SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode. Severity: High (CVSS 8.8).
Is any SportsPress – Sports Club & League Manager vulnerability listed in CISA KEV?
No. None of the known SportsPress – Sports Club & League Manager vulnerabilities is currently listed in the CISA KEV catalog.