CVE-2026-57749 | meBoy SportsPress Pro Plugin up to 2.7.29 on WordPress filename control

A vulnerability was found in meBoy SportsPress Pro Plugin up to 2.7.29 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is tracked as CVE-2026-57749. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More