Vulnerabilidades em beardev
12 resultadosAnálise Vexday
A Beardev apresenta um perfil de risco moderado com 9 CVEs catalogadas, sendo 1 crítica e 4 publicadas recentemente, indicando exposição contínua. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo a pressão imediata. A fraqueza dominante é injeção SQL (CWE-89), um vetor clássico que requer atenção especial na arquitetura de aplicações.
CVE-2026-42647CRITICALWordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerabilityEPSS 1.3%CVE-2022-2717HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderbyEPSS 1.2%CVE-2022-2718HIGHJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderbyEPSS 1.2%CVE-2025-7721CRITICALJoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File InclusionEPSS 0.6%CVE-2024-43355MEDIUMWordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-44031MEDIUMWordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-6929HIGHJoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' ParameterEPSS 0.3%CVE-2026-11920MEDIUMJoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' ParameterEPSS 0.3%CVE-2024-12633HIGHJoomSport <= 5.6.17 - Reflected Cross-Site Scripting via pageEPSS 0.3%CVE-2026-12133MEDIUMJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX actionEPSS 0.3%CVE-2026-13010MEDIUMJoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode AttributeEPSS 0.2%CVE-2026-12134MEDIUMJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX actionEPSS 0.2%