CVE-2026-121380
Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to retrieve the email addresses of people invited to join teams.
| Vendor | unknown |
| Product | tournamatch |
| Published | Nov 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown tournamatch
Be the first to know when new unknown vulnerabilities affecting unknown tournamatch are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Tournamatch
0 < 4.7.1
References
Credits
WPScan