WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-tickets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
event-tickets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Slug
event-tickets
Published
2024-02-21
Title
Event Tickets and Registration < 5.8.2 - Missing Authorization
Slug
event-tickets
Published
2024-03-26
Title
Event Tickets and Registration < 5.8.3 - Improper Authorization to Information Disclosure
Slug
event-tickets
Published
2024-07-12
Title
Event Tickets < 5.11.0.5 - Cross-Site Request Forgery
Slug
event-tickets
Published
2025-01-29
Title
Event Tickets < 5.18.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
event-tickets
Published
2025-02-13
Title
Event Tickets and Registration < 5.19.1.2 - Missing Authorization to Ticket Deletion
Slug
event-tickets
Published
2025-03-27
Title
Event Tickets < 5.20.1 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2025-10-17
Title
Event Tickets and Registration < 5.26.6 - Unauthenticated Ticket Payment Bypass
Slug
event-tickets
Published
2025-10-16
Title
Event Tickets < 5.26.4 - Missing Authorization
Slug
event-tickets
Published
2026-05-02
Title
Event Tickets and Registration < 5.27.6.1 - Missing Authorization
Slug
event-tickets
Published
2026-07-07
Title
Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move
Slug
event-tickets
Published
2026-07-08
Title
Event Tickets and Registration < 5.28.5.1 - Missing Authorization
Slug
event-tickets
Published
2026-07-20
Title
Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation
Slug
event-tickets
Published
2026-07-24
Title
Event Tickets and Registration < 5.29.1 - Missing Authorization
Slug
event-tickets
Published
2026-07-20
Title
Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR
Slug
event-tickets
Published
2026-09-07
Title
Event Tickets and Registration < 5.27.4.1 - Missing Authorization to Unauthenticated Stripe Credentials Update
Slug
event-tickets
Published
2026-08-24
Title
Event Tickets and Registration < 5.29.3 - Unauthenticated Stored Cross-Site Scripting
Slug
event-tickets
Published
2026-09-23
Title
Event Tickets and Registration < 5.29.5 - Unauthenticated Stored Cross-Site Scripting
Slug
event-tickets
Published
2026-09-30
Title
Event Tickets and Registration < 5.29.5.1 - Authenticated (Contributor+) SQL Injection
Slug
event-tickets
Published
2026-10-05
Title
Event Tickets and Registration < 5.30.0.1 - Missing Authorization
Slug
event-tickets
Published
2026-10-08
Title
Event Tickets and Registration < 5.30.0.2 - Missing Authorization
Slug
event-tickets
Published
2026-10-08
Title
Event Tickets and Registration < 5.30.0.2 - Missing Authorization
Slug
event-tickets
Published
2026-10-08
Title
Event Tickets and Registration < 5.30.0.2 - Missing Authorization