Lukashuser

4 CVEs across 2 Lukashuser products. Browse Lukashuser vulnerabilities, severities, and proof-of-concept exploits.

Lukashuser products with known CVEs

ProductCVEs
Ekc Tournament Manager3
Ekc Tournament Manager1
Lukashuser CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-9765Medium6.52025-05-15The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory
CVE-2024-9711Medium5.42025-05-15The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a lo…
CVE-2024-9709Medium5.42025-05-15The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a lo…
CVE-2024-49674Critical9.62024-10-31Cross-Site Request Forgery (CSRF) vulnerability in lukashuser EKC Tournament Manager ekc-tournament-manager allows Upload a Web Shell to a Web Server.This issu…