Login Request a demo
JO
Product
JoomSport
by beardev · last CVE Jun 11, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 4High 2Medium 2Low 0
Severity
All severities8Critical4High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add JoomSport to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-4050
9.8
5%
Dec 19
The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by…
Affected: before 5.2.8
CVE-2021-24384
9.8
2%
Jul 6
The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the…
Affected: before 5.1.8
CVE-2019-14348
9.8
21%
Aug 5
The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid…
Affected: 3.3
CVE-2026-42647
9.3
1%
Jun 11
WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability
Affected: through 5.7.7
Showing 4