WordPress plugin
World Cup Predictor security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All World Cup Predictor vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
World Cup Predictor: common questions
Does World Cup Predictor have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in World Cup Predictor: 1 medium. At least one is not fixed in the latest version.
How do I check which version of World Cup Predictor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent World Cup Predictor vulnerability?
CVE-2025-22794, published Jan 13, 2025: World Cup Predictor <= 1.9.6 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any World Cup Predictor vulnerability listed in CISA KEV?
No. None of the known World Cup Predictor vulnerabilities is currently listed in the CISA KEV catalog.
