PatchTheCVE: ekc tournament managerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-9765: The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outhttps://patchthecve.com/cve/CVE-2024-9765.htmlhttps://patchthecve.com/cve/CVE-2024-9765.htmlWed, 17 Jun 2026 08:25:12 +0000MEDIUM 6.5: The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directoryCVE-2024-9711: The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its shttps://patchthecve.com/cve/CVE-2024-9711.htmlhttps://patchthecve.com/cve/CVE-2024-9711.htmlWed, 17 Jun 2026 08:25:06 +0000MEDIUM 5.4: The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVE-2024-9709: The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its shttps://patchthecve.com/cve/CVE-2024-9709.htmlhttps://patchthecve.com/cve/CVE-2024-9709.htmlWed, 17 Jun 2026 08:25:06 +0000MEDIUM 5.4: The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack