157 matches found
CVE-2024-5860
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2024-5860 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2024-5860 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2024-5860
Tickera – WordPress Event Ticketing vulnerability (CVE-2024-5860): a missing capability check on the tc_dl_delete_tickets AJAX action allows authenticated users with Subscriber-level access and above to delete all event tickets. Affects all versions up to 3.5.2.8. The provided documents confirm t...
WordPress plugin Tickera security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-37199 · WordPress · The Tickera
Name of the Vulnerable Software and Affected Versions: The Tickera – WordPress Event Ticketing plugin versions up to, and including, 3.5.2.8 Description: The issue is related to unauthorized loss of data due to a missing capability check on the tc dl delete tickets AJAX action. This allows...
WordPress Tickera plugin <= 3.5.2.8 - Authenticated Ticket Deletion vulnerability
Authenticated Ticket Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Tickera versions = 3.5.2.8...
WordPress Tickera Plugin <= 3.5.2.8 is vulnerable to Broken Access Control
Software Tickera Type Plugin Vulnerable versions = 3.5.2.8 Fixed in 3.5.2.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5860 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 94f597cb32e8 Credits Lucio Sá Required privilege...
Tickera < 3.5.2.9 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
Description The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with...
Tickera < 3.5.2.7 - Missing Authorization
Description The Tickera plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the generateticketpreview function in versions up to, and including, 3.5.2.6. This makes it possible for authenticated attackers, with contributor-level access and above,...
CVE-2024-35729
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.2.6...
CVE-2024-35729
Missing Authorization vulnerability in Tickera.This issue affects Tickera: from n/a through 3.5.2.6...
CVE-2024-35729
CVE-2024-35729 is described in the Initial Document as a Missing Authorization vulnerability affecting Tickera (Tickera Event Ticketing) from n/a through version 3.5.2.6. The Connected Documents do not provide concrete technical details (product, component, root cause, versions, impact, or fix) f...
CVE-2024-35729 WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tickera.This issue affects Tickera: from n/a through 3.5.2.6...
CVE-2024-35729 WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.2.6...
WordPress plugin Tickera security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin Tickera versions = 3.5.2.6...
WordPress Tickera Plugin <= 3.5.2.6 is vulnerable to Broken Access Control
Software Tickera Type Plugin Vulnerable versions = 3.5.2.6 Fixed in 3.5.2.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35729 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 41ad9b04a28b Credits Manab Jyoti Dowarah Required...
WordPress Tickera plugin < 3.5.2.5 - Ticket leakage through IDOR vulnerability
Ticket leakage through IDOR vulnerability discovered by Martin Thirup Christensen in WordPress Plugin Tickera versions 3.5.2.5...