Unknown Tournamatch

• CVE-2026-121380 Unrated Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API –
• CVE-2026-121379 Unrated Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion –
• CVE-2024-5644 Medium 5.4 WordPress Plugin Tournamatch < 4.6.1 - Admin+ Stored XSS via Ladders 0.4%
• CVE-2024-5627 Medium 5.4 WordPress Plugin Tournamatch < 4.6.1 - Subscriber+ Stored XSS 0.3%