Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

BearDev vulnerabilities

14 published CVEs name BearDev among the affected products.

Published CVEs
14
Last 12 months
8
Critical
2
Known exploited
0

Critical 2High 4Medium 8Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20222
  2. 20242
  3. 20252
  4. 20268

Newest CVEs

  • CVE-2026-118698

    JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium6.5
  • CVE-2026-118192

    JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium6.5
  • CVE-2026-11920

    JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium4.9
  • CVE-2026-13010

    JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium6.5
  • CVE-2026-12134

    JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium4.3
  • CVE-2026-12133

    JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Medium4.3
  • CVE-2026-42647

    WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

    Beardev · JoomSport

    Critical9.3
  • CVE-2026-6929

    JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    High7.5
  • CVE-2025-7721

    JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    Critical9.8
  • CVE-2024-12633

    JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page

    beardev · JoomSport – for Sports: Team & League, Football, Hockey & more

    High7.1