BearDev vulnerabilities
We track 6 vulnerabilities in BearDev products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2026.
Latest BearDev vulnerabilities
- 9.3 Critical severity
JoomSport: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7.
- 7.5 High severity
JoomSport – for Sports: Team & League…: Improper Neutralization of Special Elements used in an SQL Command
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'sortf' parameter in all versions up to, and including, 5.7.7 due to insufficient escaping on the user supplied para
- 9.8 Critical severity
JoomSport – for Sports: Team & League…: Improper Control of Filename for Include/Require Statement in PHP Program
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include an
- 7.1 High severity
JoomSport – for Sports: Team & League…: Improper Neutralization of Input During Web Page Generation
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and output escap
- 8.8 High severity
JoomSport: Missing Authorization
Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.
- 8.8 High severity
JoomSport: Missing Authorization
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.