CVE-2024-12578

creationtimestamp| type| source ---|---|--- 2024-12-14 06:18:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113649721265727065 2024-12-14 06:49:32+00:00| seen| https://t.me/cvedetector/12909 2025-01-17 16:56:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2157...

CVE-2024-12578 Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure

The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickeraticketsinfo' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, ema...