CVE WATCH / VULNERABILITY DETAIL
CVE-2026-118698
MEDIUMCVSS 6.5NVD feed
Published 30 October 2026 · tracked since 30 October 2026
Description
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgroup' parameter in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-59387 HIGH 8.8
- CVE-2026-97645 HIGH 7.2
- CVE-2026-89435 HIGH 8.8
- CVE-2026-90437 HIGH 7.2
- CVE-2026-116622 HIGH 7.2
- CVE-2026-110732 HIGH 7.5
- CVE-2026-103039 CRITICAL 9.8
- CVE-2026-119059 MEDIUM 4.3
- CVE-2026-119087 MEDIUM 4.3
- CVE-2026-118165 MEDIUM 6.8