279 matches found
WordPress Event Tickets < 5.2.2 - Open Redirect
WordPress Event Tickets 5.2.2 is susceptible to an open redirect vulnerability. The plugin does not validate the tribeticketsredirectto parameter before redirecting the user to the given value, leading to an arbitrary redirect issue. id: CVE-2021-25028 info: name: WordPress Event Tickets 5.2.2 -...
CVE-2026-93526
The Event Tickets WordPress plugin (versions
EUVD-2026-85530
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.4 versions...
CVE-2026-93526: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.4 versions...
CVE-2026-3174
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
EUVD-2026-72697
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
CVE-2026-3174 Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
CVE-2026-3174
The Event Tickets and Registration plugin for WordPress is affected by a missing capability check on the Stripe OAuth return endpoint in all versions up to and including 5.27.4 . Discovered by researcher h0xilo , the flaw allows an unauthenticated attacker to overwrite the site's Stripe merchant ...
CVE-2026-3174 Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
WordPress Event Tickets and Registration plugin <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update vulnerability
Missing Authorization to Unauthenticated Stripe Credentials Update vulnerability discovered by h0xilo in WordPress Plugin Event Tickets versions = 5.27.4...
PT-2026-87031
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
CVE-2026-3174: Missing Authorization
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site...
EUVD-2026-65170
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78263
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78263 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78263 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78263
Event Tickets WordPress plugin versions
WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Udin Chan in WordPress Plugin Event Tickets versions = 5.29.2.1...