CVE-2024-9709

Name of the Vulnerable Software and Affected Versions EKC Tournament Manager WordPress plugin versions prior to 2.2.2

Description The issue is related to the lack of a CSRF check when updating settings in the EKC Tournament Manager WordPress plugin. This could allow attackers to make a logged-in admin change settings via a CSRF attack.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the settings update functionality to minimize the risk of exploitation.