Lucene search
+L

2035 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/24 12:00 a.m.•9 views

FreeBSD : RT -- XSS via calendar invitations (269c2de7-afaa-11f0-b4c8-792b26d8a051)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 269c2de7-afaa-11f0-b4c8-792b26d8a051 advisory. Mateusz Szymaniec and CERT Polska Reports: RT is vulnerable to XSS via calendar invitations added to a...

5.3CVSS5.5AI score0.00447EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/23 3:13 p.m.•15 views

CVE-2025-62027

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS7AI score0.00217EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/22 10:37 p.m.•115 views

VulnerabilityAgent

VulnerabilityAgent 🛡️ An autonomous agent built on the BeeAI...

7AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•19 views

EUVD-2025-35381

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

6.5AI score0.00217EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:16 p.m.•44 views

CVE-2025-62027

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•8 views

CVE-2025-62027 WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS6.6AI score0.00217EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•25 views

CVE-2025-62027 WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS0.00217EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•25 views

CVE-2025-62027

CVE-2025-62027 concerns a Missing Authorization (broken access control) in StellarWP Event Tickets (WordPress plugin) affecting Event Tickets versions up to 5.26.3. The connected Wordfence report confirms a missing authorization issue for Event Tickets and lists it under Missing Authorization wit...

5.4CVSS6.6AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•15 views

WordPress plugin Event Tickets 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.00217EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-62027: Missing Authorization

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS5.8AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/21 9:35 p.m.•19 views

CLSA-2025-1761082525 Fix CVE(s): CVE-2022-45141

SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets - debian/patches/CVE-2022-45141.patch: fix session key selection algorithm for selecting the ticket in strongest-to-weakest order, thus allowing the target server to select better encryption - CVE-2022-45141...

9.8CVSS5.8AI score0.00454EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/19 6:43 a.m.•27 views

CVE-2025-11517

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS6AI score0.00405EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/18 9:30 a.m.•14 views

EUVD-2025-34982

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS5.5AI score0.00405EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/18 7:15 a.m.•43 views

CVE-2025-11517

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS0.00405EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/18 6:42 a.m.•45 views

CVE-2025-11517

CVE-2025-11517 affects the WordPress plugin “Event Tickets and Registration” (

7.5CVSS5.6AI score0.00405EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/18 6:42 a.m.•31 views

CVE-2025-11517 Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS0.00405EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/18 6:42 a.m.•6 views

CVE-2025-11517 Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS5.6AI score0.00405EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/18 1:10 a.m.•15 views

WordPress Event Tickets and Registration plugin <= 5.26.5 - Unauthenticated Ticket Payment Bypass vulnerability

Unauthenticated Ticket Payment Bypass vulnerability discovered by Jack Pas Dark. in WordPress Plugin Event Tickets versions = 5.26.5...

7.5CVSS6.9AI score0.00405EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/18 12:00 a.m.•14 views

WordPress plugin Event Tickets and Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.00405EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•0 views

CVE-2025-11517: Authorization Bypass Through User-Controlled Key

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5. This is due to the /wp-json/tribe/tickets/v1/commerce/free/order endpoint not verifying that a ticket type should be free allowing the user to bypass the payment...

7.5CVSS5.7AI score0.00405EPSS
SaveExploits0References1
Rows per page
Query Builder