WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tickera-event-ticketing-system
Published
2024-11-04
Title
Tickera – WordPress Event Ticketing < 3.5.4.6 - Unauthenticated Arbitrary Shortcode Execution
Slug
tickera-event-ticketing-system
Published
2024-12-13
Title
Tickera – WordPress Event Ticketing < 3.5.4.9 - Unauthenticated Customer Data Exposure
Slug
tickera-event-ticketing-system
Published
2025-03-27
Title
Tickera < 3.5.5.3 - Missing Authorization
Slug
tickera-event-ticketing-system
Published
2025-09-03
Title
Tickera < 3.5.5.8 - Cross-Site Request Forgery
Slug
tickera-event-ticketing-system
Published
2026-01-09
Title
Tickera < 3.5.6.5 - Missing Authorization
Slug
tickera-event-ticketing-system
Published
2026-01-16
Title
Tickera < 3.5.6.3 - Missing Authorization
Slug
tickera-event-ticketing-system
Published
2026-02-17
Title
Tickera – WordPress Event Ticketing < 3.5.6.5 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update
Slug
ticket-help-desk-system-lite
Published
2025-04-02
Title
Support Helpdesk Ticket System Lite <= 4.5.2 - Reflected Cross-Site Scripting
Slug
ticket-manager
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ticket-spot
Published
2025-10-02
Title
Event Tickets, RSVPs, Calendar < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticket-tailor
Published
2024-03-15
Title
Ticket Tailor < 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticketsource-events
Published
2024-12-19
Title
Sell Tickets Online – TicketSource Ticket Shop for WordPress < 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tida-url-screenshot
Published
2024-10-21
Title
Tida URL Screenshot < 1.0.2 - Reflected Cross-Site Scripting
Slug
tidekey
Published
2025-03-27
Title
Tidekey <= 1.1 - Reflected Cross-Site Scripting
Slug
tidio-form
Published
2016-04-12
Title
Easy Contact Form Builder <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-gallery
Published
2016-04-12
Title
Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-live-chat
Published
2019-11-05
Title
Tidio Live Chat < 4.2.0 - CSRF to Stored XSS
Slug
tidy-up
Published
2024-12-16
Title
Tidy Up <= 1.3 - Cross-Site Request Forgery
Slug
tidyro
Published
2025-01-16
Title
Tidy.ro <= 1.3 - Reflected Cross-Site Scripting
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Stored XSS via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Reflected XSS
Slug
tier-management-petfinder
Published
2025-11-18
Title
Pet-Manager – Petfinder < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kwm-petfinder Shortcode
Slug
tier-pricing-table
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tier-pricing-table
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting