BBearDev

Products

Exploited and recent CVEs

• CVE-2026-118698 Medium 6.5 JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute 0.3%
• CVE-2026-118192 Medium 6.5 JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute 0.4%
• CVE-2026-11920 Medium 4.9 JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter 0.5%
• CVE-2026-13010 Medium 6.5 JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute 0.4%
• CVE-2026-12134 Medium 4.3 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action 0.4%
• CVE-2026-12133 Medium 4.3 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action 0.4%
• CVE-2026-42647 Critical 9.3 WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability 1.3%
• CVE-2026-6929 High 7.5 JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter 0.3%
• CVE-2025-7721 Critical 9.8 JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion 0.7%
• CVE-2024-12633 High 7.1 JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page 0.3%
• CVE-2024-43355 Medium 4.3 WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability 0.4%
• CVE-2024-44031 Medium 4.3 WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability 0.4%
• CVE-2022-2718 High 7.2 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby 1.5%
• CVE-2022-2717 High 7.2 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby 1.5%