CVE-2026-107507
Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.
| Vendor | unknown |
| Product | squadeno |
| Published | Oct 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown squadeno
Be the first to know when new unknown vulnerabilities affecting unknown squadeno are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Squadeno
0 < 1.12.0
References
Credits
Doston Abdullayev WPScan