Advisories · Technology
Tournamatch.
Every CVE that names Tournamatch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API
- Tournamatch
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion
- Tournamatch
- Path traversal
- CVSS 6.4 Medium
Tournamatch <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Tournamatch
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Tournamatch plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability
- Tournamatch
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
WordPress Plugin Tournamatch < 4.6.1 - Admin+ Stored XSS via Ladders
- Tournamatch
- CVSS 5.4 Medium
WordPress Plugin Tournamatch < 4.6.1 - Subscriber+ Stored XSS
- Tournamatch