CVE-2026-14822

CVE-2026-14822 affects the WordPress plugin “Event Tickets and Registration” (before 5.29.0.1). The vulnerability is an missing authorization check on an order-management REST endpoint, allowing unauthenticated users to alter the status of existing orders. The underlying root cause is lack of acc...