24701 matches found
CVE-2025-1402 Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2025-1402
CVE-2025-1402 affects the WordPress Event Tickets and Registration plugin. A missing capability check in the ajax_ticket_delete function in all versions up to 5.19.1.1 allows authenticated attackers with Contributor+ access to delete arbitrary Attendee tickets, causing unauthorized data loss. The...
CVE-2025-1402 Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajaxticketdelete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2024-13648
creationtimestamp| type| source ---|---|--- 2025-02-21 10:20:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4871 2025-02-21 12:35:18+00:00| seen| Telegram/-xBIPsZP-f0defBViLndVmNYN6G7Povb8ypfeFV9IYqr4H 2025-02-21 13:55:34+00:00| seen| https://t.me/cvedetector/18646...
CVE-2023-51303
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
PT-2025-7501 · WordPress · Event Tickets/Registration
Name of the Vulnerable Software and Affected Versions: Event Tickets and Registration plugin for WordPress versions up to, and including, 5.19.1.1 Description: The issue is related to a missing capability check on the ajax ticket delete function, allowing authenticated attackers with...
WordPress plugin Event Tickets and Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...
WordPress Event Tickets and Registration plugin <= 5.19.1.1 - Missing Authorization to Ticket Deletion vulnerability
Missing Authorization to Ticket Deletion vulnerability discovered by the sneaky squirrel in WordPress Plugin Event Tickets versions = 5.19.1.1...
CVE-2025-27098
creationtimestamp| type| source ---|---|--- 2025-02-20 21:17:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4811 2025-02-20 23:12:03+00:00| seen| https://t.me/cvedetector/18598...
CVE-2024-54961
creationtimestamp| type| source ---|---|--- 2025-02-20 20:41:30+00:00| seen| https://t.me/cvedetector/18593 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...
CVE-2023-51337
PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...
CVE-2025-26308
creationtimestamp| type| source ---|---|--- 2025-02-20 19:00:29+00:00| seen| https://t.me/cvedetector/18562 2025-02-24 18:26:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5197...
WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter vulnerability
Unauthenticated SQL Injection via Event Status Parameter vulnerability discovered by mikemyers in WordPress Plugin Events Manager versions = 6.6.3...
CVE-2023-51312
creationtimestamp| type| source ---|---|--- 2025-02-20 17:19:59+00:00| seen| https://t.me/cvedetector/18548...
CVE-2023-51306
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...
CVE-2023-51306
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...
CVE-2024-37360
creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:51+00:00| seen| https://t.me/cvedetector/18503...