S4E just found a critical-severity finding from cve-2026-109618 php2shell scanner (version based)
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2024-9765

6.5
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description

The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admin to download system files outside of the WordPress directory

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
ekc tournament manager
Updated Oct 12, 2026View on NVD →
S4E scanner

CVE history: ekc tournament manager

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →