Skip to content
OpenAdvisories

Vendor

Beardev

14 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42647 Public exploit Scanner template

    WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7.

  • Critical 9.8

    JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include a…