JoomSport – for Sports: Team & League, Football, Hockey & more vulnerabilities

Plugin slug joomsport-sports-league-results-management · 17 known vulnerabilities · latest disclosed 2026-10-29 · WordPress.org page

Every listed vulnerability has a fix. Version 5.7.15 or later is not affected by any of them. If your site runs an older version, update it.

9 of 17 rated high or critical (CVSS 7 or more).

Known vulnerabilities in JoomSport – for Sports: Team & League, Football, Hockey & more

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 6.5<= 5.7.145.7.15CVE-2026-1186982026-10-29Advisory
Medium 6.5<= 5.7.115.7.14CVE-2026-1181922026-10-28Advisory
Medium 4.9<= 5.7.95.7.10CVE-2026-119202026-08-04Advisory
Medium 6.5<= 5.7.95.7.10CVE-2026-130102026-07-09Advisory
Medium 4.3<= 5.7.85.7.9CVE-2026-121342026-07-01Advisory
Medium 4.3<= 5.7.85.7.9CVE-2026-121332026-06-30Advisory
High 7.5<= 5.7.75.7.8CVE-2026-69292026-05-12Advisory
High 7.5<= 5.7.75.7.8CVE-2026-426472026-04-29Advisory
Critical 9.8<= 5.7.35.7.4CVE-2025-77212025-10-02Advisory
High 7.1<= 5.6.175.6.18CVE-2024-126332025-01-06Advisory
Medium 4.3<= 5.6.35.6.4CVE-2024-440312024-09-24Advisory
Medium 4.3<= 5.3.05.5.7CVE-2024-433552024-08-16Advisory
Critical 9.8<= 5.2.75.2.8CVE-2022-40502022-11-28Advisory
High 7.2<= 5.2.55.2.6CVE-2022-27172022-08-08Advisory
High 7.2<= 5.2.55.2.6CVE-2022-27182022-08-08Advisory
Critical 9.8< 5.1.85.1.8CVE-2021-243842021-06-08Advisory
Critical 9.8< 3.43.4CVE-2019-143482019-07-29Advisory

Check if a site is affected

Enter a site address to see which version of JoomSport – for Sports: Team & League, Football, Hockey & more and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the JoomSport – for Sports: Team & League, Football, Hockey & more plugin safe to use?

All 17 known issues are fixed in current versions (5.7.15 or later). Keeping it updated is what matters.

How do I check which version of JoomSport – for Sports: Team & League, Football, Hockey & more my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome