LOW 2.7 NVD

CVE-2026-107507

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer ro

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.

References

https://wpscan.com/vulnerability/f02f3608-0809-4a4e-ae5f-5e89d42c4026/

Published: 2026-10-11 · Source: NVD · Feed updated: 2026-10-12

This low severity vulnerability with a CVSS score of 2.7 was published on 2026-10-11 via NVD.

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.