Vulnerabilities > CVE-2024-34824 - Missing Authorization vulnerability in Themeboy Sportspress

CVSS 6.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

themeboy

CWE-862

NVD

Published: 2024-06-11

Updated: 2024-07-23

Summary

Missing Authorization vulnerability in ThemeBoy SportsPress – Sports Club & League Manager.This issue affects SportsPress – Sports Club & League Manager: from n/a through 2.7.20.

Vulnerable Configurations

Part	Description	Count
Application	Themeboy Themeboy Sportspress 2.5.5 Themeboy Sportspress 2.5.6 Themeboy Sportspress 2.5.7 Themeboy Sportspress 2.5.8 Themeboy Sportspress 2.5.9 Themeboy Sportspress 2.5.10 Themeboy Sportspress 2.6 Themeboy Sportspress 2.6.1 Themeboy Sportspress 2.6.2 Themeboy Sportspress 2.6.3 Themeboy Sportspress 2.6.4 Themeboy Sportspress 2.6.5 Themeboy Sportspress 2.6.7 Themeboy Sportspress 2.6.8 Themeboy Sportspress 2.6.9 Themeboy Sportspress 2.6.10 Themeboy Sportspress 2.6.11 Themeboy Sportspress 2.6.12 Themeboy Sportspress 2.6.13 Themeboy Sportspress 2.6.14 Themeboy Sportspress 2.6.15 Themeboy Sportspress 2.6.16 Themeboy Sportspress 2.6.17 Themeboy Sportspress 2.6.18 Themeboy Sportspress 2.6.19 Themeboy Sportspress 2.6.20 Themeboy Sportspress 2.7 Themeboy Sportspress 2.7.1 Themeboy Sportspress 2.7.2	29

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

https://patchstack.com/database/vulnerability/sportspress/wordpress-sportspress-sports-club-league-manager-plugin-2-7-20-broken-access-control-vulnerability?_s_id=cve