{"id":"CVE-2023-7252","aliases":["EUVD-2023-59433","GHSA-6cxj-fx46-x5rx"],"status":"published","title":"Tickera \u003c 3.5.2.5 - Ticket leakage through IDOR","description":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00515,"percentile":0.44162,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-04-22T05:00:01Z","modified":"2026-06-17T06:52:24Z","products":[{"vendor":"tickera","product":"tickera"},{"vendor":"unknown","product":"tickera"}],"references":[{"url":"https://wpscan.com/vulnerability/c452c5da-05a6-4a14-994d-e5049996d496/","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7252"},{"url":"https://wpscan.com/vulnerability/c452c5da-05a6-4a14-994d-e5049996d496"},{"url":"https://github.com/advisories/GHSA-6cxj-fx46-x5rx"}],"sources":{"cve":[{"id":"CVE-2023-7252","title":"Tickera \u003c 3.5.2.5 - Ticket leakage through IDOR","description":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.","status":"published","published":"2024-04-22T05:00:01.365Z","modified":"2024-11-22T14:41:14.188Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:33.794347Z"}],"euvd":[{"id":"EUVD-2023-59433","description":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.","status":"published","published":"2024-04-22T05:00:01Z","modified":"2024-11-22T14:41:14Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:50.64101Z"}],"ghsa":[{"id":"GHSA-6cxj-fx46-x5rx","title":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users'...","description":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.","status":"published","published":"2024-04-22T06:30:29Z","modified":"2024-07-03T18:36:19Z","cvss":[{"version":"3.1","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N","level":"none"}],"updated_at":"2026-11-02T14:57:34.303632Z"}],"nvd":[{"id":"CVE-2023-7252","description":"The Tickera  WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.","status":"published","published":"2024-04-22T05:15:07.31Z","modified":"2026-06-17T06:52:24.977Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:09:11.362739Z"}]}}