CVE-2019-14348: Beardev Joomsport

Critical severity, CVSS 9.8. EPSS: 20.5% chance of exploitation in the next 30 days.

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter.

Affected products

• Beardev Joomsport: version 3.3 only

Published 2019-08-05. Last modified 2026-06-17.