WordPress plugin
JoomSport – for Sports: Team & League, Football, Hockey & more security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 17 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High5
- Medium8
- Low0
All JoomSport – for Sports: Team & League, Football, Hockey & more vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection via 'sortf' Parameter ≤5.7.7Update to 5.7.8 | CVE-2026-6929 | |
| High7.5 | Unauthenticated SQL Injection ≤5.7.7Update to 5.7.8 | CVE-2026-42647 | |
| Critical9.8 | Unauthenticated Directory Traversal to Local File Inclusion ≤5.7.3Update to 5.7.4 | CVE-2025-7721 | |
| High7.1 | Reflected Cross-Site Scripting via page ≤5.6.17Update to 5.6.18 | CVE-2024-12633 | |
| Critical9.8 | Unauthenticated SQL Injection ≤5.2.7Update to 5.2.8 | CVE-2022-4050 | |
| High7.2 | Authentciated (Admin+) SQL Injection via orderby ≤5.2.5Update to 5.2.6 | CVE-2022-2717 | |
| High7.2 | Authenticated (Admin+) SQL Injection via orderby ≤5.2.5Update to 5.2.6 | CVE-2022-2718 | |
| Critical9.8 | Object Injection <5.1.8Update to 5.1.8 | CVE-2021-24384 | |
| Critical9.8 | SQL Injection <3.4Update to 3.4 | CVE-2019-14348 |
- High7.5Unauthenticated SQL Injection via 'sortf' Parameter
≤5.7.7Update to 5.7.8
- High7.5Unauthenticated SQL Injection
≤5.7.7Update to 5.7.8
- Critical9.8Unauthenticated Directory Traversal to Local File Inclusion
≤5.7.3Update to 5.7.4
- High7.1Reflected Cross-Site Scripting via page
≤5.6.17Update to 5.6.18
- Critical9.8Unauthenticated SQL Injection
≤5.2.7Update to 5.2.8
- High7.2Authentciated (Admin+) SQL Injection via orderby
≤5.2.5Update to 5.2.6
- High7.2Authenticated (Admin+) SQL Injection via orderby
≤5.2.5Update to 5.2.6
- Critical9.8Object Injection
<5.1.8Update to 5.1.8
- Critical9.8SQL Injection
<3.4Update to 3.4
JoomSport – for Sports: Team & League, Football, Hockey & more: common questions
Does JoomSport – for Sports: Team & League, Football, Hockey & more have known vulnerabilities?
Yes. VulnCrest Radar lists 17 known vulnerabilities in JoomSport – for Sports: Team & League, Football, Hockey & more: 4 critical, 5 high, 8 medium. None are known to affect version null.
How do I check which version of JoomSport – for Sports: Team & League, Football, Hockey & more I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JoomSport – for Sports: Team & League, Football, Hockey & more vulnerability?
CVE-2026-118698, published Oct 29, 2026: JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute. Severity: Medium (CVSS 6.5).
Is any JoomSport – for Sports: Team & League, Football, Hockey & more vulnerability listed in CISA KEV?
No. None of the known JoomSport – for Sports: Team & League, Football, Hockey & more vulnerabilities is currently listed in the CISA KEV catalog.