JO
Product
JoomSport
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 2Low 0
Watch
Add JoomSport to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-4050 | 9.8 | Dec 19 | The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by… Affected: before 5.2.8 |
| CVE-2021-24384 | 9.8 | Jul 6 | The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the… Affected: before 5.1.8 |
| CVE-2019-14348 | 9.8 | Aug 5 | The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid… Affected: 3.3 |
| CVE-2026-42647 | 9.3 | Jun 11 | WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability Affected: through 5.7.7 |
| CVE-2024-43355 | 8.8 | Nov 1 | WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability Affected: through 5.3.0 |
| CVE-2024-44031 | 8.8 | Nov 1 | WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability Affected: through 5.6.3 |
| CVE-2022-2718 | 4.9 | Sep 6 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the… Affected: through 5.2.5 |
| CVE-2022-2717 | 4.9 | Sep 6 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form… Affected: through 5.2.5 |
Showing 8