Skip to content
Sign in
5.4 Medium

CVE-2024-9709 The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings,…

Description

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
EKC Tournament Manager 2.2 earliest → < 2.2.2 2.2.2

Other CVEs of EKC Tournament Manager

The 3 CVEs of EKC Tournament Manager →
CVE-2024-9765 The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of… 6.5 Medium CVE-2024-9711 The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings,… 5.4 Medium
Track this CVE