Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: lukashuser Clear all filters
TI-2024-09062 CVE-2024-9765 · GHSA-vr72-pg8g-8362

EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability

Priority MEDIUM 62

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0161 Published 2025-05-15 Fixed in 2.2.2
TI-2024-09008 CVE-2024-9711 · GHSA-p694-pgrr-cmpq

EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352
TI-2024-09006 CVE-2024-9709 · GHSA-764c-3vwj-x87m

EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF

Priority MEDIUM 58

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00183 Published 2025-05-15 Fixed in 2.2.2 CWE-352
TI-2024-33160 CVE-2024-49674 · GHSA-h45x-8r23-7cxx

WordPress EKC Tournament Manager plugin <= 2.2.1 - CSRF to Arbitrary File Upload vulnerability

Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in lukashuser EKC Tournament Manager ekc-tournament-manager allows Upload a Web Shell to a Web Server.This issue affects EKC Tournament Manager: from n/a through <= 2.2.1.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0024 Published 2024-10-31 No fix listed CWE-352