Skip to contentStellarwp Event Tickets vulnerabilities
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityCVE-2026-620474.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityCVE-2026-620554.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1109024.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityCVE-2026-1058935.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityCVE-2026-1058914.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityCVE-2026-1058885.4 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerabilityCVE-2026-1046754.3 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' ParameterCVE-2026-976346.5 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerabilityCVE-2026-972878.5 High
- nexcess event ticketsWordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-935267.1 High
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials UpdateCVE-2026-31747.5 High
- nexcess event ticketsWordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-782637.1 High
- nexcess event ticketsWordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerabilityCVE-2026-655675.3 Medium
- nexcess event ticketsWordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerabilityCVE-2026-577057.5 High
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerabilityCVE-2026-426626.5 Medium
- stellarwp event ticketsWordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerabilityCVE-2025-620275.4 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment BypassCVE-2025-115177.5 High
- stellarwp event ticketsWordPress Event Tickets plugin <= 5.20.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-307947.1 High
- stellarwp event tickets and registration, theeventscalendar event tickets +1 moreEvent Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket DeletionCVE-2025-14025.3 Medium
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information ExposureCVE-2024-134575.3 Medium
- stellarwp event ticketsWordPress Event Tickets and Registration plugin <= 5.11.0.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-387624.3 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.8.2 - Improper Authorization to Information DisclosureCVE-2024-22614.3 Medium
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets and Registration <= 5.8.1 - Missing AuthorizationCVE-2024-10534.3 Medium
- stellarwp event ticketsEvent Tickets < 5.2.2 - Open RedirectCVE-2021-250286.1 Medium