9 matches found
WordPress Tickera – Sell Tickets & Manage Events plugin <= 3.6.0.1 - Authenticated (Staff+) SQL Injection vulnerability
Authenticated Staff+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Tickera versions = 3.6.0.1...
CVE-2026-13755 Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pricewrapper' Shortcode Attribute in all versions up to, and including, 3.6.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2023-27812
Malicious code in bioql PyPI...
CVE-2025-58611
Cross-Site Request Forgery CSRF vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Request Forgery.This issue affects Tickera: from n/a through = 3.5.5.6...
CVE-2023-23726
Cross-Site Request Forgery CSRF vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affects Tickera: from n/a through 3.5.1.0...
CVE-2025-30851
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.5.2...
CVE-2025-30851
CVE-2025-30851 in Tickera – Tickera WordPress Event Ticketing plugin (Tickera) is a Missing Authorization vulnerability caused by incorrectly configured access control security levels. The issue affects Tickera versions from n/a up to and including 3.5.5.2. The CVSS v3.1 base score is 4.3 (Medium...
CVE-2023-23726
CVE-2023-23726 affects Tickera WordPress Tickera plugin versions up to 3.5.1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that enables unauthorized post-status changes. Root cause: CSRF in the plugin enables an attacker to induce a user to perform a state-changing action on Ti...
