Non évaluée

EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF

CVE-2024-9711 Première détection SecPulse May 16, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Faits clés

Gravité: Non évaluée
Publication: May 16, 2025
Première détection SecPulse: May 16, 2025

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05