Plugin icon

Event Tickets and Registration

event-tickets

Vulnerabilities:

19

Last Updated:

August 7, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-07-24
Title
Event Tickets and Registration < 5.29.1 - Missing Authorization
Fixed in
Fixed in 5.29.1
CVSS
5.3 (medium)
Published
2026-07-20
Title
Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR
Fixed in
Fixed in 5.29.0.1
CVSS
2.2 (low)
Published
2026-07-20
Title
Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation
Fixed in
Fixed in 5.29.0.1
CVSS
5.3 (medium)
Published
2026-07-08
Title
Event Tickets and Registration < 5.28.5.1 - Missing Authorization
Fixed in
Fixed in 5.28.5.1
CVSS
5.3 (medium)
Published
2026-07-07
Title
Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move
Fixed in
Fixed in 5.28.4
CVSS
3.5 (low)
Published
2026-05-02
Title
Event Tickets and Registration < 5.27.6.1 - Missing Authorization
Fixed in
Fixed in 5.27.6.1
CVSS
5.3 (medium)
Published
2025-10-17
Title
Event Tickets and Registration < 5.26.6 - Unauthenticated Ticket Payment Bypass
Fixed in
Fixed in 5.26.6
CVSS
7.5 (high)
Published
2025-10-16
Title
Event Tickets < 5.26.4 - Missing Authorization
Fixed in
Fixed in 5.26.4
CVSS
4.3 (medium)
Published
2025-03-27
Title
Event Tickets < 5.20.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.20.1
CVSS
6.1 (medium)
Published
2025-02-13
Title
Event Tickets and Registration < 5.19.1.2 - Missing Authorization to Ticket Deletion
Fixed in
Fixed in 5.19.1.2
CVSS
5.3 (medium)
Published
2025-01-29
Title
Event Tickets < 5.18.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Fixed in
Fixed in 5.18.1.1
CVSS
5.3 (medium)
Published
2024-07-12
Title
Event Tickets < 5.11.0.5 - Cross-Site Request Forgery
Fixed in
Fixed in 5.11.0.5
CVSS
4.3 (medium)
Published
2024-03-26
Title
Event Tickets and Registration < 5.8.3 - Improper Authorization to Information Disclosure
Fixed in
Fixed in 5.8.3
CVSS
4.3 (medium)
Published
2024-02-21
Title
Event Tickets and Registration < 5.8.2 - Missing Authorization
Fixed in
Fixed in 5.8.2
CVSS
4.3 (medium)
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Fixed in
Fixed in 5.8.1
CVSS
2.7 (low)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.0
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 5.3.0.1
CVSS
4.3 (medium)
Published
2021-12-22
Title
Event Tickets < 5.2.2 - Open Redirect
Fixed in
Fixed in 5.2.2
CVSS
4.3 (medium)
Published
2019-09-02
Title
Event Tickets <= 4.10.7.1 - CSV Injection
Fixed in
Fixed in 4.10.7.2
CVSS
8.8 (high)