| CVE-2026-121379 |
Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion
|
9.6
Critical
|
Nov 7, 2026 |
| CVE-2026-121380 |
Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API
|
5.3
Medium
|
Nov 7, 2026 |
| CVE-2024-5627 |
The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with…
|
5.4
Medium
|
Jul 13, 2024 |
| CVE-2024-5644 |
The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow…
|
5.4
Medium
|
Jul 13, 2024 |