2.7
Low
CVE-2026-107507 The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved,…
Description
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Squadeno 1.12 | earliest → < 1.12.0 | 1.12.0 |