Beardev Joomsport
8 CVEs affecting Beardev Joomsport. Latest disclosed: 2026-06-11. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4050 | Critical | 9.8 | 2022-12-19 | The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection ex… |
CVE-2021-24384 | Critical | 9.8 | 2021-07-06 | The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised u… |
CVE-2019-14348 | Critical | 9.8 | 2019-08-05 | The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?acti… |
CVE-2026-42647 | Critical | 9.3 | 2026-06-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue… |
CVE-2022-2718 | High | 7.2 | 2022-09-06 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the jooms… |
CVE-2022-2717 | High | 7.2 | 2022-09-06 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the jooms… |
CVE-2024-44031 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3. |
CVE-2024-43355 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport… |