CVE-2026-57749

Name of the Vulnerable Software and Affected Versions SportsPress Pro versions 2.7.29 and earlier

Description A Local File Inclusion (LFI) issue exists where users with Contributor privileges can read local files on the server. Local File Inclusion is a vulnerability that allows an attacker to induce the application to expose files on the server that are not intended to be public.

Recommendations Restrict access to the software immediately. At the moment, there is no information about a newer version that contains a fix for this vulnerability.