A vulnerability was found in beardev JoomSport Plugin up to 5.7.7 on WordPress and classified as critical . This affects an unknown part. The manipulation of the argument sortf results in sql injection. This vulnerability is identified as CVE-2026-6929 . The attack can be executed remotely. There is not any exploit available.