Skip to content
OpenAdvisories

Vendor

Beardev

14 known vulnerabilities.

Products

JoomSport – for Sports: Team & League, Football, Hockey & more 11 JoomSport 3
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-118698

    JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgroup' parameter in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter …

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 6.5
    CVE-2026-118192

    JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'team_id' parameter in all versions up to, and including, 5.7.11 due to insufficient escaping on the user supplied parameter…

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 4.9
    CVE-2026-11920

    JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter…

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 6.5
    CVE-2026-13010

    JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied par…

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 4.3
    CVE-2026-12134

    JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to perform an…

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 4.3
    CVE-2026-12133

    JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action

    The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Group Deletion in versions up to, and including, 5.7.8. This is due to a missing capability check in the joomsport_seas…

    Beardev JoomSport – for Sports: Team & League, Football, Hockey & more Web / CMS
  • Medium 4.3
    CVE-2024-43355

    WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.

    Beardev JoomSport
  • Medium 4.3
    CVE-2024-44031

    WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.

    Beardev JoomSport