CVE-2024-9711

The CVE relates to the WordPress EKC Tournament Manager plugin prior to version 2.2.2. Affected component: the plugin’s settings update workflow. Root cause: absence of CSRF protection when updating settings, enabling a logged-in attacker to alter settings via a CSRF attack. Impact stated across ...

CVE-2024-9765

The CVE-2024-9765 entry concerns the WordPress plugin EKC Tournament Manager (versions before 2.2.2). Affected component: EKC Tournament Manager plugin. Description from multiple sources indicates an admin-level vulnerability where a logged-in administrator can download system files outside the W...

CVE-2024-9709

The CVE-2024-9709 entry concerns the EKC Tournament Manager WordPress plugin. Affected: EKC Tournament Manager WordPress plugin versions prior to 2.2.2. Issue: the plugin does not perform a CSRF check when updating its settings, which could allow a logged-in administrator to modify settings via a...