Beardev Joomsport vulnerabilities

• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute CVE-2026-118698 6.5 MediumOctober 30, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute CVE-2026-118192 6.5 MediumOctober 29, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter CVE-2026-11920 4.9 MediumAugust 5, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute CVE-2026-13010 6.5 MediumJuly 10, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action CVE-2026-12134 4.3 MediumJuly 2, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action CVE-2026-12133 4.3 MediumJuly 1, 2026
• beardev joomsport WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability CVE-2026-42647 Public exploit 9.3 CriticalJune 11, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter CVE-2026-6929 7.5 HighMay 13, 2026
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion CVE-2025-7721 9.8 CriticalOctober 3, 2025
• beardev joomsport – for sports: team & league, football, hockey & more JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page CVE-2024-12633 7.1 HighJanuary 7, 2025
• beardev joomsport WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability CVE-2024-43355 4.3 MediumNovember 1, 2024
• beardev joomsport WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability CVE-2024-44031 4.3 MediumNovember 1, 2024
• beardev joomsport JoomSport < 5.2.8 - Unauthenticated SQLi CVE-2022-4050 9.8 CriticalDecember 19, 2022
• beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 more JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby CVE-2022-2718 7.2 HighSeptember 6, 2022
• beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 more JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby CVE-2022-2717 7.2 HighSeptember 6, 2022
• beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 more JoomSport < 5.1.8 - Unauthenticated PHP Object Injection CVE-2021-24384 9.8 CriticalJuly 6, 2021
• beardev joomsport The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete... CVE-2019-14348 Public exploit EPSS 20.5% 9.8 CriticalAugust 5, 2019