Lucene search

K
LiquidwebEvent Tickets

5 matches found

CVE
CVE
added 2019/09/08 11:15 p.m.93 views

CVE-2019-16120

CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.

8.8CVSS8.8AI score0.03004EPSS
CVE
CVE
added 2024/02/22 6:15 a.m.68 views

CVE-2024-1053

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'email' action in all versions up to, and including, 5.8.1. This makes it possible for authenticated attackers, with contributor-level access and above, to e...

4.3CVSS5.2AI score0.00116EPSS
CVE
CVE
added 2024/03/04 9:15 p.m.56 views

CVE-2024-1319

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

4.3CVSS6.7AI score0.00133EPSS
CVE
CVE
added 2024/03/04 9:15 p.m.54 views

CVE-2024-1316

The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protecte...

6.5CVSS6.4AI score0.00424EPSS
CVE
CVE
added 2025/01/30 7:15 a.m.38 views

CVE-2024-13457

The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.1 via the tc-order-id parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view order...

5.3CVSS5.1AI score0.00039EPSS