CVE-2026-121380

CVE-2026-121380CVE-2026-121380

Description

The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to retrieve the email addresses of people invited to join teams.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Last modified2026-11-07
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.