WordPress Plugin Vulnerabilities

Event Tickets <= 4.10.7.1 - CSV Injection

Description

The Event Tickets WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
event-tickets
Fixed in 4.10.7.2

References

CVE
CVE-2019-16120
Exploitdb
47335
URL
https://packetstormsecurity.com/files/#154295/

Miscellaneous

Original Researcher
MTK
Verified
No
WPVDB ID
ee446d23-1c76-4cc0-bdc6-78ff16192abb

Timeline

Publicly Published
2019-09-02 (about 6 years ago)
Added
2019-09-03 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-02-14
Title
Bit Assist < 1.5.3 - Subscriber+ Arbitrary File Read via fileID Parameter
Published
2014-08-01
Title
floating-tweets - directory traversal
Published
2014-04-28
Title
TinyMCE Color Picker 1.1 - tinymce-colorpicker.php Missing edit_others_posts Capability Check
Published
2017-01-11
Title
WordPress 3.0-4.7 - Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Published
2026-04-08
Title
Bookly < 27.1 - Unauthenticated Price Manipulation via 'tips'