CVE-2026-42647: WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

Status

Published

2026-06-11

Updated

2026-06-12

Assigning organization

Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Beardev JoomSport

Default version status: unaffected

n/a to ≤ 5.7.7affected

References

https://patchstack.com/database/wordpress/plugin/joomsport-sports-league-results-management/vulnerability/wordpress-joomsport-plugin-5-7-7-sql-injection-vulnerability?_s_id=cve ↗