Skip to content
Unknown Event Tickets vulnerabilities
-
theeventscalendar event tickets and registration
Event Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST API
CVE-2026-122087
3.7 Low
-
theeventscalendar event tickets and registration
Event Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST Endpoint
CVE-2026-122061
5.3 Medium
-
unknown event tickets manager for woocommerce
Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price Manipulation
CVE-2026-123129
5.3 Medium
-
unknown event tickets manager for woocommerce
Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure
CVE-2026-122085
6.5 Medium
-
unknown event tickets with ticket scanner
Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search
CVE-2026-121858
6.3 Medium
-
unknown event tickets with ticket scanner
Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend
CVE-2026-121857
4.2 Medium
-
theeventscalendar event tickets and registration
Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR
CVE-2026-14823
2.2 Low
-
theeventscalendar event tickets and registration
Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation
CVE-2026-14822
5.3 Medium
-
theeventscalendar event tickets and registration
Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move
CVE-2026-14819
3.5 Low
-
unknown event tickets with ticket scanner
Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
CVE-2024-6711
3.5 Low
-
unknown event tickets with ticket scanner
Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
CVE-2025-1762
4.3 Medium
-
liquidweb event tickets, theeventscalendar event tickets and registration, unknown events tickets plus +1 more +3 more
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
CVE-2024-1316
6.5 Medium
-
stellarwp event tickets
Event Tickets < 5.2.2 - Open Redirect
CVE-2021-25028
6.1 Medium