CVE-2026-118698 | beardev JoomSport Plugin up to 5.7.14 on WordPress Shortcode pgroup sql injection

October 30, 2026 Yanac

A vulnerability identified as critical has been detected in beardev JoomSport Plugin up to 5.7.14 on WordPress. The impacted element is an unknown function of the component Shortcode. This manipulation of the argument pgroup causes sql injection.

This vulnerability is handled as CVE-2026-118698. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More