WordPress Plugin Vulnerabilities

Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN

Description

The plugin does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount, allowing unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without paying.

Proof of Concept

Affects Plugins

Plugin icon
tickera-event-ticketing-system
Fixed in 3.6.0.4

References

CVE
CVE-2026-88998

Miscellaneous

Original Researcher
ryan fabella
Submitter
ryan fabella
Verified
Yes
WPVDB ID
50fe4955-9193-4842-9ea6-1812d70d813e

Timeline

Publicly Published
2026-10-12 (about 2 days ago)
Added
2026-10-12 (about 1 day ago)
Last Updated
2026-10-12 (about 1 day ago)

Other

Published
Title
Published
2026-10-01
Title
hCaptcha for WP < 5.4.0 - Unauthenticated Captcha Verification Bypass
Published
2026-09-30
Title
Creator LMS < 1.2.20 - Subscriber+ Payment Bypass via 'purchase_by' Parameter
Published
2023-08-04
Title
User Access Manager < 2.2.18 - IP Spoofing
Published
2026-03-27
Title
SureForms < 2.6.0 - Unauthenticated Payment Amount Validation Bypass via 'form_id'
Published
2026-08-27
Title
Essential Addons for Elementor < 6.8.1 - Unauthenticated Captcha Bypass