Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: lukashuser Component: Ekc Tournament Manager Clear all filters
TI-2024-09062 CVE-2024-9765 · GHSA-vr72-pg8g-8362

EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability

Priority MEDIUM 62

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0161 Published 2025-05-15 Fixed in 2.2.2
TI-2024-09008 CVE-2024-9711 · GHSA-p694-pgrr-cmpq

EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352
TI-2024-09006 CVE-2024-9709 · GHSA-764c-3vwj-x87m

EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352