CVE-2026-121380
The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to ret
CVSS
—
Sem CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 7 de nov. de 2026 · Última mod.: 7 de nov. de 2026
Ainda não há histórico EPSS suficiente.
The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to retrieve the email addresses of people invited to join teams.
Nenhum CVE relacionado por CWE ou produto.