Vulnerabilidades en BearDev
12 resultadosAnálisis Vexday
BearDev apresenta footprint reduzido com apenas 1 CVE registrado na base, sem incidentes de exploração ativa em campo. A vulnerabilidade, classificada como CWE-862 (controle de acesso inadequado), não alcança severidade crítica, porém representa um vetor de risco que demanda validação e remediação de acordo com seu contexto de deployment.
CVE-2026-42647CRITICALWordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerabilityEPSS 1.3%CVE-2022-2717HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderbyEPSS 1.2%CVE-2022-2718HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderbyEPSS 1.2%CVE-2025-7721CRITICALJoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File InclusionEPSS 0.6%CVE-2024-43355MEDIUMWordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-44031MEDIUMWordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-6929HIGHJoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' ParameterEPSS 0.3%CVE-2026-11920MEDIUMJoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' ParameterEPSS 0.3%CVE-2024-12633HIGHJoomSport <= 5.6.17 - Reflected Cross-Site Scripting via pageEPSS 0.3%CVE-2026-12133MEDIUMJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX actionEPSS 0.3%CVE-2026-13010MEDIUMJoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode AttributeEPSS 0.2%CVE-2026-12134MEDIUMJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX actionEPSS 0.2%