Vulnerabilities in Tournamatch

2 results
CVE-2025-32600HIGHWordPress Tournamatch plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-4594MEDIUMTournamatch <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%