Live Sports Streamthunder
Live Sports Streamthunder has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Live Sports Streamthunder has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Jang Jeong Ahn (Jhanks). Live Sports Streamthunder is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2025-49967Live Sports Streamthunder <= 2.1 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Live Sports Streamthunder
Author
marcusjansen
With this plugin you can show automatically a daily list of events from all kind of sports on your site or just the sport you want. Put your own links on each sport event to send traffic wherever you want or show the default third party links to brind your users usefull sites to watch every sport match. Usage Create widgets selecting the sports for each one on Live Sports Streamhunder tab in wp-admin. Copy & Paste the generated shortcode and put it on a page, post or wherever you want to show the list of sport events. Configure your widget so that it best fits your site on Display Options tab in wp-admin. Changing the CSS Display Options tab in wp-admin.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C