Threats tagged 'ghsa-2hw7-c3hq-6x3w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-121380The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing Medium2026-11-07GCVE DatabaseCVE-2026-121380 The Tournamatch WordPress plugin versions prior to 4.7.1 have a vulnerability where the team invitation listing is not properly access-restricted. This flaw allows unauthenticated users to access and retrieve email addresses of individuals invited to join teams. Report on CVE-2026-121380 Vulnerability #ghsa-2hw7-c3hq-6x3w	GCVE Database	2026-11-07

Page 1 of 1