CVE-2024-9765

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-05-15

Last modified

2025-05-16

Affected products

• Ekc Tournament Manager (Lukashuser)
• Ekc Tournament Manager (Unknown)

References

• https://wpscan.com/vulnerability/c86157b0-43f3-4e82-9697-7dd9401b48d6/