CVE-2026-62047

WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

4.3 Medium

CVE-2026-62047 is a medium vulnerability (CVSS 4.3) in Liquid Web / Stellarwp Event Tickets, published October 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. No source names a fixed version.

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

0.26%Unchanged since Oct 31, 2026

What each source reports

CVE List Score used 4.3

WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Record: CVE-2026-62047
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-862
Updated: 2026-11-02

EUVDEUVD-2026-114274 4.3

Record: EUVD-2026-114274
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-qh3p-qcm6-6w26 4.3

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows...

Record: GHSA-qh3p-qcm6-6w26
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-862
Updated: 2026-11-02

NVD 4.3

Record: CVE-2026-62047
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-862
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-02	created	CVE List, EUVD, GitHub Advisories, NVD