Input validation vulnerability in Live Scores for SportsPress 1.9.0

The Live Scores for SportsPress plugin for WordPress is not secure in versions up to, and including, 1.9.0. This security issue could allow an attacker who is already logged in to the website to access or execute files on the server that they should not have access to. This could be used to expose sensitive information, bypass access controls, or even execute malicious code. It is possible because the plugin allows files, such as images, to be uploaded and included.

Detected in:

Live Scores for SportsPress open vulnerable versions: >= * <= 1.9.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.