Live Scores for SportsPress

Live Scores for SportsPress has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Missing Authorization, PHP Remote File Inclusion.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2022.

2 independent researchers contributed these findings, most of them (2) reported by WPScanTeam. Live Scores for SportsPress is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Live Scores for SportsPress vulnerabilities before they are exploited.

Most severe open issueCVSS 6.3CVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Read the full analysis

Vulnerability Records

4 records


2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Live Scores for SportsPress <= 1.9.2	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	No
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Live Scores for SportsPress *	`CVE-2022-4974`	6.3 Medium	Anonymous	No
2021-08-24 00:00	Live Scores for SportsPress <= 1.9.0 - Authenticated (Admin+) Local File Inclusion Live Scores for SportsPress <= 1.9.0	`N/A`	7.2 High	WPScanTeam	Yes
2021-08-24 00:00	Live Scores for SportsPress <= 1.9.0 - Reflected Cross-Site Scripting Live Scores for SportsPress <= 1.9.0	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–4 of 4 reports

Latestv1.9.2

Live Scores for SportsPress

Author

Igor Benic

4.3(3)

86/100

Last Updated

2022-04-17 (5y ago)

Active Installs

100+

Downloads

25,994

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 5.9.16

Created

2017-11-12 (9y ago)

Treat your visitors with live scores directly on your site. This plugin is an extension for SportsPress. Define the structure of your sport and deliver real-time minutes to your visitors. You can define periods that track minutes such as 1st & 2nd Half in Soccer and periods which do not track time (and even pause it) such as Timeouts (Basketball, Handball) or Penalties (after 120 minutes in soccer) Currently Available Live Templates: Event List Event Blocks League Tables Single Event: Live Results Front From to edit live results and status Scorers (Add players who scored) Widgets: Live Event List Admin: Live Events Page where you can manage all live events Minutes Corrections PRO Feaures: Live Event Commentary – add comments on the event page so your visitors know what is happening on the field Custom Commentary Icons Front Commentary Form Live Notifications Integration Commentary Custom Colors Auto Start an Event Commentary Player (Add a player picture to the commentary)

View on WordPress.org