Themeboy

8 CVEs across 4 Themeboy products. Browse Themeboy vulnerabilities, severities, and proof-of-concept exploits.

Themeboy products with known CVEs

ProductCVEs
Sportspress5
Sportspress – Sports Club & League Manager3
Hide Plugins1
Sportspress Pro1
Themeboy CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57749High7.52026-07-02Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.
CVE-2025-15368High8.82026-02-04The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribut…
CVE-2025-62115Medium4.32025-12-31Missing Authorization vulnerability in ThemeBoy Hide Plugins hide-plugins allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…
CVE-2024-3986Medium4.82024-07-30The SportsPress WordPress plugin before 2.7.22 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf…
CVE-2024-34824Medium4.32024-06-11Missing Authorization vulnerability in ThemeBoy SportsPress – Sports Club & League Manager.This issue affects SportsPress – Sports Club & League Manager: from…
CVE-2024-1178Medium5.32024-03-05The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2021-24578Medium6.12021-12-21The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading t…
CVE-2020-13892Medium5.42020-06-09The SportsPress plugin before 2.7.2 for WordPress allows XSS.