Beardev

Joomsport

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2026-11920

  • EPSS 0.29%
  • Veröffentlicht 05.08.2026 07:39:24
  • Zuletzt bearbeitet 12.08.2026 21:00:37

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied ...

6.5

CVE-2026-13010

  • EPSS 0.25%
  • Veröffentlicht 10.07.2026 09:32:43
  • Zuletzt bearbeitet 10.07.2026 16:16:25

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7.9 due to insufficient escaping on the user sup...

4.3

CVE-2026-12134

  • EPSS 0.4%
  • Veröffentlicht 02.07.2026 08:33:06
  • Zuletzt bearbeitet 02.07.2026 15:16:56

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to p...

4.3

CVE-2026-12133

  • EPSS 0.25%
  • Veröffentlicht 01.07.2026 03:43:33
  • Zuletzt bearbeitet 01.07.2026 13:56:17

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Group Deletion in versions up to, and including, 5.7.8. This is due to a missing capability check in the jooms...

9.3

CVE-2026-42647

  • EPSS 1.32%
  • Veröffentlicht 11.06.2026 21:04:14
  • Zuletzt bearbeitet 12.06.2026 13:13:53

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7.

7.5

CVE-2026-6929

  • EPSS 0.33%
  • Veröffentlicht 13.05.2026 05:29:35
  • Zuletzt bearbeitet 13.05.2026 14:43:46

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'sortf' parameter in all versions up to, and including, 5.7.7 due to insufficient escaping on the user sup...

9.8

CVE-2025-7721

  • EPSS 0.62%
  • Veröffentlicht 03.10.2025 11:17:11
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to ...

7.1

CVE-2024-12633

  • EPSS 0.29%
  • Veröffentlicht 07.01.2025 06:15:17
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and ou...

8.8

CVE-2024-44031

  • EPSS 0.37%
  • Veröffentlicht 01.11.2024 15:15:52
  • Zuletzt bearbeitet 23.04.2026 15:19:02

Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.

8.8

CVE-2024-43355

  • EPSS 0.42%
  • Veröffentlicht 01.11.2024 15:15:48
  • Zuletzt bearbeitet 13.11.2024 01:24:34

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.