EUVD-2026-96381

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6...

CVE-2026-105889

The Tickera tickera-event-ticketing-system WordPress plugin (versions ≤ 3.6.0.6 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command. This vulnerability allows an attacker to execute arbitrary SQL commands, potentially leading to a h...

CVE-2025-67939

CVE-2025-67939 (Tickera WordPress Tickera plugin) is a Missing Authorization / Broken Access Control vulnerability affecting Tickera up to version 3.5.6.2. The issue arises from incorrectly configured access control security levels, allowing unauthorized access. Public records from NVD/Red Hat/CV...

CVE-2025-67939: Missing Authorization

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.6.2...

CVE-2025-69355

CVE-2025-69355 concerns Tickera – Sell Tickets & Manage Events (WordPress plugin). Wordfence references WorDFence WORDFENCE: Tickera

CVE-2025-69355: Missing Authorization

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.6.4...

CVE-2025-58611: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Request Forgery.This issue affects Tickera: from n/a through = 3.5.5.6...

CVE-2025-30851: Missing Authorization

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.5.2...

CVE-2024-35729: Missing Authorization

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.2.6...

Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure

Due to missing authorization controls in the "admininit" hooks, all personal data from registered users of an event could be exported into a downloadable PDF file by every unauthenticated user. The event ID could be read from the page source and/or easily enumerated in sequence. According to the...