Approved changes feed: RSS · Atom

cpe:2.3:a:lukashuser:ekc_tournament_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLukashuser (e39b6f9d-4669-59b4-b07a-3c5ad9f75ffe)
ProductEkc Tournament Manager (d3208254-c391-52fe-a5f3-d436731cc785)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lukashuser/ekc-tournament-manager purl2cpe 2026-06-01 10:18:04.288570

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49674 vulnerable 2026-06-08 06:50:14.492954 WordPress EKC Tournament Manager plugin <= 2.2.1 - CSRF to Arbitrary File Upload vulnerability
CRITICAL (9.6)
Cross-Site Request Forgery (CSRF) vulnerability in lukashuser EKC Tournament Manager ekc-tournament-manager allows Upload a Web Shell to a Web Server.This issue affects EKC Tournament Manager: from n/a through <= 2.2.1.
Published: 2024-10-31T10:01:19.117Z
Updated: 2026-04-28T16:10:27.233Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.