221 matches found
CVE-2021-25028
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue...
CVE-2021-25028
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue...
Crlf injection
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue...
CVE-2021-25028 Event Tickets < 5.2.2 - Open Redirect
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue...
CVE-2021-25028
Summary: CVE-2021-25028 affects the WordPress Event Tickets plugin up to version 5.2.1 (before 5.2.2). The vulnerability is an open redirect: the plugin does not validate the tribe_tickets_redirect_to parameter before redirecting, enabling arbitrary redirects. The issue is documented across multi...
WordPress plugin 输入验证错误漏洞
WordPress plugin is an open source application plugin for WordPress. WordPress plugin Event Tickets plugin version prior to 5.2.2 has an input validation error vulnerability The plugin does not validate the tribeTicketsredirectto parameter before redirecting the user to a given value...
Event Tickets < 5.2.2 - Open Redirect
The plugin does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue PoC https://exampel.com/wp-admin/admin.php?page=wpajaxrsvp-formticketsredirectto=https://wpscan.com...
Event Tickets < 5.2.2 - Open Redirect
The plugin does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue https://exampel.com/wp-admin/admin.php?page=wpajaxrsvp-form&tribeticketsredirectto=https://wpscan.com...
WordPress Event Tickets plugin <= 5.2.1 - Open Redirect vulnerability
Open Redirect vulnerability discovered in WordPress Event Tickets plugin versions = 5.2.1. Solution Update the WordPress Event Tickets plugin to the latest available version at least 5.2.2...
WordPress Event Tickets Plugin CSV Injection Vulnerability
WordPress is a blogging platform developed using the PHP language. photo-gallery is one of the photo gallery plugins used in it. A CSV injection vulnerability exists in the implementation of the WordPress Event Tickets plugin prior to version 4.10.7.2. The vulnerability stems from a lack of prope...
CVE-2019-16120
CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...
Input validation
CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...
CVE-2019-16120
CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...
CVE-2019-16120
The CVE-2019-16120 issue affects the WordPress Event Tickets plugin (Event Tickets) prior to version 4.10.7.2. The vulnerability arises in the Export Attendees feature under All Post > Ticketed > Attendees, allowing CSV injection. Impact is potential data manipulation/CSV injection in expor...
PT-2019-14524 · WordPress · Event Tickets
Name of the Vulnerable Software and Affected Versions: Event Tickets plugin for WordPress versions prior to 4.10.7.2 Description: The issue exists in the Event Tickets plugin for WordPress, specifically via the "All Post Ticketed Attendees" Export Attendees feature. This allows for CSV injection...
WordPress Event Tickets plugin <= 4.10.7.1 - CSV Injection vulnerability
CSV Injection vulnerability found by MTK in WordPress Event Tickets plugin versions = 4.10.7.1. Solution 3 September 2019 - we were unable to find a patched version of this plugin. Deactivate and uninstall until the patched version release...
WordPress Event Tickets 4.10.7.1 CSV Injection
Exploit Title: WordPress Plugin Event Tickets = 4.10.7.1 - CSV Injection Google Dork: inurl:"\wp-content\plugins\event-tickets" Date: 09-01-2019 Exploit Author: MTK http://mtk911.cf/ Vendor Homepage: https://tri.be/ Software Link: https://downloads.wordpress.org/plugin/event-tickets.4.10.7.1.zip...
Wordpress Event Tickets 4.10.7.1 Plugin - CSV Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Plugin Event Tickets = 4.10.7.1 - CSV Injection Google Dork: inurl:"\wp-content\plugins\event-tickets" Exploit Author: MTK http://mtk911.cf/ Vendor Homepage: https://tri.be/ Software Link:...
Wordpress Plugin Event Tickets 4.10.7.1 - CSV Injection
Wordpress Plugin Event Tickets 4.10.7.1 - CSV Injection Exploit Title: WordPress Plugin Event Tickets = 4.10.7.1 - CSV Injection Google Dork: inurl:"\wp-content\plugins\event-tickets" Date: 09-01-2019 Exploit Author: MTK http://mtk911.cf/ Vendor Homepage: https://tri.be/ Software Link:...