CVE-2026-121380

{
  "etk_id": "ETK-2026-3808",
  "cve_id": "CVE-2026-121380",
  "display_id": "CVE-2026-121380",
  "ghsa_id": "GHSA-2hw7-c3hq-6x3w",
  "euvd_id": "EUVD-2026-118942",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated email disclosure in Tournamatch",
  "summary": "Tournamatch WordPress plugin versions before 4.7.1 expose team invitation listings without adequate access checks. An unauthenticated attacker can obtain email addresses of people invited to teams when such invitations are present.",
  "mitigation": "Upgrade the Tournamatch WordPress plugin to version 4.7.1 or later. Until upgraded, restrict public access to the affected site where possible.",
  "vendor": null,
  "product": "Tournamatch",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 4.7.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "4.7.1"
      ],
      "package_name": "Tournamatch",
      "purl": null
    }
  ],
  "cwes": [
    200
  ],
  "cvss_score": 5.3,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": true,
  "pipeline_minutes": 11.720683,
  "t0_at": "2026-11-07T06:00:26.714000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-07T08:23:56.742701+00:00",
      "days": 0.09965310996527778,
      "is_lower_bound": false,
      "measured_at": "2026-11-07T06:00:26.714000+00:00",
      "url": null
    },
    "exploit": {
      "at": "2026-11-07T08:23:56.742701+00:00",
      "days": 0.09965310996527778,
      "is_lower_bound": false,
      "measured_at": "2026-11-07T06:00:26.714000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-07T06:00:26.714000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-07T06:00:26.714000+00:00",
      "url": "https://github.com/advisories/GHSA-2hw7-c3hq-6x3w"
    }
  }
}