WordPress Tickera plugin <= 3.5.4.8 - Unauthenticated Customer Data Exposure vulnerability

Unauthenticated Customer Data Exposure vulnerability discovered by WordFence in WordPress Plugin Tickera versions = 3.5.4.8...

CVE-2025-69355

CVE-2025-69355 concerns Tickera – Sell Tickets & Manage Events (WordPress plugin). Wordfence references WorDFence WORDFENCE: Tickera

WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin Tickera versions = 3.5.2.6...

WordPress Tickera plugin < 3.5.2.5 - Ticket leakage through IDOR vulnerability

Ticket leakage through IDOR vulnerability discovered by Martin Thirup Christensen in WordPress Plugin Tickera versions 3.5.2.5...

WordPress Tickera Plugin <= 3.5.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Tickera Type Plugin Vulnerable versions = 3.5.1.0 Fixed in 3.5.1.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23726 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 674b722356ed Credits István Márton Required...