Beardev - vulnerabilities (CVEs)
15 CVEs in 4 products, 0 in the last 30 days, newest from 2026-08-05.
Products
- Football - 9 CVEs
- Hockey More - 9 CVEs
- Joomsport For Sports Team League - 9 CVEs
- Joomsport - 7 CVEs
Newest CVEs of Beardev
- CVE-2026-11920 - CVSS 4.9 (medium), 2026-08-05: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in…
- CVE-2026-13010 - CVSS 6.5 (medium), 2026-07-10: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode…
- CVE-2026-12134 - CVSS 4.3 (medium), 2026-07-02: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
- CVE-2026-12133 - CVSS 4.3 (medium), 2026-07-01: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Group Deletion in…
- CVE-2026-42647 - CVSS 9.3 (critical), 2026-06-11: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue…
- CVE-2026-6929 - CVSS 7.5 (high), 2026-05-13: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'sortf'…
- CVE-2025-7721 - CVSS 9.8 (critical), 2025-10-03: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
- CVE-2024-12633 - CVSS 7.1 (high), 2025-01-07: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page…
- CVE-2024-44031 - CVSS 8.8 (high), 2024-11-01: Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.
- CVE-2024-43355 - CVSS 8.8 (high), 2024-11-01: Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport:…
- CVE-2022-4050 - CVSS 9.8 (critical), 2022-12-19: The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection…
- CVE-2022-2718 - CVSS 7.2 (high), 2022-09-06: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the…
- CVE-2022-2717 - CVSS 7.2 (high), 2022-09-06: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the…
- CVE-2021-24384 - CVSS 9.8 (critical), 2021-07-06: The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised…
- CVE-2019-14348 - CVSS 9.8 (critical), 2019-08-05: The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the…
