WordPress JoomSport <5.2.8 - SQL Injection

WordPress JoomSport plugin before 5.2.8 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operation...

VulnCheck KEV: CVE-2025-7721

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...

CVE-2026-107507

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-62124

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events = 2.21 versions...

CVE-2026-62124 WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events = 2.21 versions...

EUVD-2026-96509

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events = 2.21 versions...

CVE-2026-62124

The N7 | Golf Club Sports & Events WordPress theme (versions

CVE-2026-62124: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events = 2.21 versions...

CVE-2026-94061

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.This issue affects Whistle - Sports Club: from n/a through 4.2...

CVE-2026-94061 WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.This issue affects Whistle - Sports Club: from n/a through 4.2...

EUVD-2026-95761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.This issue affects Whistle - Sports Club: from n/a through 4.2...

CVE-2026-94061

The Designthemes Whistle - Sports Club WordPress theme (versions

PT-2026-108902

Name of the Vulnerable Software and Affected Versions Whistle - Sports Club versions prior to 4.3 Description Designthemes Whistle - Sports Club contains a Reflected Cross-site Scripting XSS flaw. This occurs due to improper neutralization of input during the generation of web pages, which allows...

CVE-2026-94061: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.This issue affects Whistle - Sports Club: from n/a through 4.2...

WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme N7 | Golf Club Sports & Events versions = 2.21...

WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Whistle - Sports Club theme = 4.2 - Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Whistle - Sports Club versions = 4.2...

databricks-genai (>=1.1.8, <=1.2.0a22), sports-prediction-framework (>=0.1.0, <=0.1.4) potentially affected by CVE-2026-64849 via mlflow (2.20.2)

mlflow PYPI version 2.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.1.8, =0.1.0, =0.1.4 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...

WordPress JoomSport – for Sports: Team & League, Football, Hockey & more plugin <= 5.7.9 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by Nicolas Decayeux in WordPress Plugin JoomSport versions = 5.7.9...

CVE-2026-11920: Improper Neutralization of Special Elements used in an SQL Command

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

databricks-genai (>=1.1.8, <=1.2.0a22), sports-prediction-framework (>=0.1.0, <=0.1.4) potentially affected by CVE-2026-3198 via mlflow (2.20.2)

mlflow PYPI version 2.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.1.8, =0.1.0, =0.1.4 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...