Doston Abdullayev

**Name of the Vulnerable Software and Affected Versions** Squadeno WordPress plugin versions prior to 1.12.0 **Description** Insufficient restriction enforcement during the sport saving process allows users with the lowest-tier Trainer role to modify unauthorized fields of a sport they are assigned to. Affected fields include the section, age group, author, password, comment settings, and date. **Recommendations** Update Squadeno WordPress plugin to version 1.12.0 or later.