Tournamatch vulnerabilities

Products

• Tournamatch 6

Newest

• tournamatch Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API CVE-2026-121380 5.3 MediumNovember 7, 2026
• tournamatch Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion CVE-2026-121379 9.6 CriticalNovember 7, 2026
• tournamatch Tournamatch <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-4594 6.4 MediumMay 23, 2025
• tournamatch WordPress Tournamatch plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-32600 7.1 HighApril 11, 2025
• tournamatch WordPress Plugin Tournamatch < 4.6.1 - Admin+ Stored XSS via Ladders CVE-2024-5644 5.4 MediumJuly 13, 2024
• tournamatch WordPress Plugin Tournamatch < 4.6.1 - Subscriber+ Stored XSS CVE-2024-5627 5.4 MediumJuly 13, 2024