WordPress Football Pool plugin <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Football Pool versions = 2.12.4...

CVE-2025-5490

creationtimestamp| type| source ---|---|--- 2025-06-19 05:42:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18840 2025-06-19 09:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxadqhpjx2i...