Aller au contenu
Se connecter
5.4 Moyenne

CVE-2024-9711 The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings,…

Description

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
EKC Tournament Manager 2.2 premières → < 2.2.2 2.2.2

Autres CVE de EKC Tournament Manager

Les 3 CVE de EKC Tournament Manager →
CVE-2024-9765 The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of… 6.5 Moyenne CVE-2024-9709 The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings,… 5.4 Moyenne
Suivre cette CVE