VulnSocial

CVE-2026-42647Active Exploitation

MEDIUMCVSS 9.3 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. This issue affects JoomSport: from n/a through 5.7.7.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-12); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-12: 1Mentions · 2026-10-22: 1Active Exploitation · 2026-06-12: 1Patch / Workaround · 2026-06-12: 1Technical Details · 2026-06-12: 1Technical Details · 2026-10-22: 106-1210-22
Signal classification2 categories
Active Exploitation
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-121
Active Exploitation1
2026-10-221
Disclosure1
Full discourse2 posts
  • Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs
    Active Exploitation

    CVE-2026-42647 (Beardev JoomSport). Attackers can target public WordPress sites to extract sensitive database content. Active exploitation is reported. Patch immediately. See full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-06-11/TIER_1_CVE-2026-42647.md #CyberSecurity #WordPress #SQLInjection #WebSecurity #DPI

    Post summary

    CVE‑2026‑42647 is actively exploited in WordPress sites; a patch is immediately required, and the vulnerability involves SQL injection to exfiltrate database data.

    00024390
    59 followersView on X
  • Rahul Tyagi@rahultyagihacks
    Disclosure

    🚨 CVE-2026-42647: JoomSport SQL Injection Explained Can a WordPress plugin expose database secrets without login? 🔗 Read the technical breakdown: https://safe.security/resources/blog/cve-2026-20253-splunk-enterprise-10-x-unauthenticated-arbitrary-file-write-to-rce-via-postgresql-sidecar-recovery-endpoint/ #CVE202642647 #WordPress #SQLInjection #CTEM https://t.co/uNwZFbeP9m

    Post summary

    The tweet announces CVE-2026-42647 as a SQL Injection vulnerability in the JoomSport WordPress plugin, providing basic technical details but no PoC, exploit, patch, or active exploitation evidence. The linked URL actually points to a different CVE's blog post.

    00000188
    34.5K followersView on X

Explore more

Back to dashboard