Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2026-107507

Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit

Description

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Squadeno

Default version status: unaffected

  • 0 to < 1.12.0affected

References