CVE-2023-23988

Missing Authorization vulnerability in Joseph C Dolson My Tickets.This issue affects My Tickets: from n/a through 1.9.11...

CVE-2023-23988

CVE-2023-23988 affects the WordPress My Tickets plugin (versions <= 1.9.11). The issue is a Missing Authorization vulnerability, allowing unauthenticated users to bypass payment-related checks, potentially impacting the payment flow. The official Patchstack entry confirms the vulnerable softwa...

WordPress My Tickets Plugin <= 1.9.11 is vulnerable to Other Vulnerability Type

Software My Tickets Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A6: Security Misconfiguration Classification Other Vulnerability Type CVE CVE-2023-23988 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 857918c48e0e Credits yuyudhn Required privileg...