Football Pool

Vulnerabilities 11Slug football-poolLatest version 2.13.4WordPress.org →

Minimum safe version

2.13.0

Update to 2.13.0 or later to address 11 fixable vulnerabilities

Latest available2.13.4 ✓

Medium 6.5

2025-09-09< 2.13.0

CVE-2025-58987

CVE Wordfence EUVD

Medium 6.5

2025-06-27< 2.12.6

CVE-2025-53280

CVE Wordfence EUVD

Medium 5.5

2025-06-19< 2.12.5

Football Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

EUVD Wordfence CVE

Medium 4.3

2025-03-27< 2.12.3

CVE-2025-30764

CVE EUVD Patchstack Wordfence

Medium 6.5

2024-08-12< 2.11.10

CVE-2024-43139

CVE Patchstack Wordfence

Medium 5.9

2024-08-12< 2.12.1

CVE-2024-43130

CVE Patchstack Wordfence

Medium 6.5

2024-03-27< 2.11.4

CVE-2024-29802

CVE Patchstack WPScan

N/A

2024-01-08< 2.11.4

WordPress Football Pool Plugin <= 2.11.3 is vulnerable to Cross Site Scripting (XSS)

Patchstack

N/A

2024-01-08< 2.11.4

Football pool <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Wordfence

N/A

2017-09-13< 2.6.4

WordPress Football Pool Plugin <= 2.6.3 - Authenticated Arbitrary File Upload Vulnerability

Patchstack

Medium 6.1

2019-08-20< 2.6.5

CVE-2017-18524

CVE Wordfence WPScan