SQL Injection

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. WordPress JoomSport <5.2.8 - SQL InjectionCVE-2022-4050Beardev · CVSS 9.8 · 5.1% likely

   CWE-89

2. JoomSport <= 5.7.7 - SQL InjectionCVE-2026-42647Beardev · CVSS 9.3 · 1.3% likely

   CWE-89

3. The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid pa…CVE-2019-14348Beardev · 21% likely

   CWE-89

4. JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderbyCVE-2022-2718beardev · CVSS 7.2 · 1.5% likely

   CWE-89

5. JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderbyCVE-2022-2717beardev · CVSS 7.2 · 1.5% likely

   CWE-89

6. JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' ParameterCVE-2026-11920beardev · CVSS 4.9 · 0.5% likely

   CWE-89

7. JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode AttributeCVE-2026-118192beardev · CVSS 6.5 · 0.4% likely

   CWE-89

8. JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode AttributeCVE-2026-13010beardev · CVSS 6.5 · 0.4% likely

   CWE-89

9. JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' ParameterCVE-2026-6929beardev · CVSS 7.5 · 0.3% likely

   CWE-89

10. JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode AttributeCVE-2026-118698beardev · CVSS 6.5 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.