Read the docs

lukashuser

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

lukashuser records in CISA KEV

No lukashuser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ekc Tournament Manager 3 records MEDIUM

Records

3 records in Ekc Tournament Manager · all components

TI-2024-09062 CVE-2024-9765 · GHSA-vr72-pg8g-8362

EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability

Priority MEDIUM 62

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0161 Published 2025-05-15 Fixed in 2.2.2
TI-2024-09008 CVE-2024-9711 · GHSA-p694-pgrr-cmpq

EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352
TI-2024-09006 CVE-2024-9709 · GHSA-764c-3vwj-x87m

EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352
Open these records in search →