Vulnerabilities in BearDev
8 resultsCVE-2026-42647CRITICALWordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerabilityEPSS 1.3%CVE-2022-2717HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderbyEPSS 1.1%CVE-2022-2718HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderbyEPSS 1.1%CVE-2025-7721CRITICALJoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File InclusionEPSS 0.6%CVE-2024-43355MEDIUMWordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-44031MEDIUMWordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-6929HIGHJoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' ParameterEPSS 0.3%CVE-2024-12633HIGHJoomSport <= 5.6.17 - Reflected Cross-Site Scripting via pageEPSS 0.3%