Skip to content

Known vulnerabilities in Tournamatch

Is your version affected?

CVE Summary Score Published
CVE-2025-4594 The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium May 23, 2025
CVE-2025-32600 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tournamatch… 7.1 High Apr 11, 2025
CVE-2024-5627 The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with… 5.4 Medium Jul 13, 2024
CVE-2024-5644 The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow… 5.4 Medium Jul 13, 2024