Veille CVE

Recherche « Unknown Event Tickets and Registration »

3 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Event Tickets and Registration » ✕
  1. CVE-2026-14823 2.2 Faible

    Unknown Event Tickets and Registration

    The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.

  2. CVE-2026-14822 5.3 Moyenne

    Unknown Event Tickets and Registration

    The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.

  3. CVE-2026-14819 3.5 Faible

    Unknown Event Tickets and Registration

    The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputting them in a ticket history log, allowing users with the Editor role and above to perform Stored Cross-Site Scripting attacks that execute against higher-privileged users on multisite installations.