CVE-2025-22717 WordPress My Tickets plugin <= 2.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects My Tickets: from n/a through = 2.0.9...

CVE-2025-22717

CVE-2025-22717 describes a Missing Authorization vulnerability in the WordPress plugin "My Tickets" by Joe Dolson. The issue affects My Tickets versions up to 2.0.9 and enables access to functionality that is not constrained by ACL checks, effectively bypassing authorization controls. The CVSS v3...