CVE-2026-107507

The Squadeno WordPress plugin prior to version 1.12.0 has a vulnerability that allows users with the lowest-tier Trainer role to modify critical attributes of a sport, including section, age group, author, password, comment settings, and date. This could lead to unauthorized changes and potential data integrity issues within the application. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.