Skip to contentTheeventscalendar Event Tickets And Registration vulnerabilities
- theeventscalendar event tickets and registrationEvent Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST APICVE-2026-1220873.7 Low
- theeventscalendar event tickets and registrationEvent Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST EndpointCVE-2026-1220615.3 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' ParameterCVE-2026-976346.5 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials UpdateCVE-2026-31747.5 High
- theeventscalendar event tickets and registrationEvent Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDORCVE-2026-148232.2 Low
- theeventscalendar event tickets and registrationEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationCVE-2026-148225.3 Medium
- theeventscalendar event tickets and registrationEvent Tickets < 5.28.4 - Editor+ Stored XSS via Ticket MoveCVE-2026-148193.5 Low
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment BypassCVE-2025-115177.5 High
- stellarwp event tickets and registration, theeventscalendar event tickets +1 moreEvent Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket DeletionCVE-2025-14025.3 Medium
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information ExposureCVE-2024-134575.3 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.8.2 - Improper Authorization to Information DisclosureCVE-2024-22614.3 Medium
- liquidweb event tickets, theeventscalendar event tickets and registration, unknown events tickets plus +1 more +3 moreEvent Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events AccessCVE-2024-13166.5 Medium
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets and Registration <= 5.8.1 - Missing AuthorizationCVE-2024-10534.3 Medium