Skip to content
Tickera vulnerabilities
Newest
-
tickera
Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN
CVE-2026-88998
5.3 Medium
-
tickera
WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability
CVE-2026-105889
9.3 Critical
-
tickera
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
CVE-2026-82226
Public exploit
9.8 Critical
-
tickera – sell tickets & manage events
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter
CVE-2026-15448
6.5 Medium
-
tickera – sell tickets & manage events
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter
CVE-2026-15761
6.5 Medium
-
tickera – sell tickets & manage events
Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute
CVE-2026-13755
6.4 Medium
-
tickera – sell tickets & manage events
Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter
CVE-2026-13754
6.5 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
tickera – sell tickets & manage events
Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update
CVE-2025-12356
4.3 Medium
-
tickera
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
CVE-2025-67939
6.5 Medium
-
tickera
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
CVE-2025-69355
4.3 Medium
-
tickera
WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58611
4.3 Medium
-
tickera
WordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability
CVE-2025-30851
4.3 Medium
-
tickera – sell tickets & manage events
Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure
CVE-2024-12578
5.3 Medium
-
tickera restrict – membership, site, content and user access restrictions for wordpress
Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-11351
5.3 Medium
-
tickera
WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.1.0 - CSRF Leading To Post Status Change Vulnerability
CVE-2023-23726
5.4 Medium
-
tickera, tickera – sell tickets & manage events +1 more
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-10263
7.3 High
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
tickera, tickera – sell tickets & manage events +1 more
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
CVE-2024-5860
4.3 Medium
-
tickera
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
CVE-2024-35729
5.3 Medium
-
restrict for elementor, tickera restrict for elementor +1 more
Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
CVE-2024-0910
5.3 Medium
-
tickera
Tickera < 3.5.2.5 - Ticket leakage through IDOR
CVE-2023-7252
5.3 Medium
-
restrict
WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41861
7.1 High
-
tickera
Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
CVE-2022-4549
4.3 Medium
-
tickera, tickera – wordpress event ticketing, unknown tickera – wordpress event ticketing +2 more
Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2021-24797
6.1 Medium