WordPress Event Tickets Manager for WooCommerce plugin < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure vulnerability

Unauthenticated Ticket Transfer and Attendee PII Disclosure vulnerability discovered by Sunil Tripathy in WordPress Plugin Event Tickets Manager for WooCommerce versions 1.6.0...

CVE-2026-122085

The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their...

CVE-2026-122085

The Event Tickets Manager for WooCommerce WordPress plugin (versions before 1.6.0 ) is vulnerable to an authorization bypass due to a lack of proper authorization and nonce checks on its ticket-transfer feature. Because this feature is accessible to unauthenticated users , an attacker can transfe...

CVE-2026-122085 Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure

The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their...

EUVD-2026-119459

The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their...

PT-2026-139913

The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their...