My Tickets Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

My Tickets Project records in CISA KEV

No My Tickets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Tickets 2 records LOW

Records

2 records

TI-2022-23517 CVE-2022-47440 · GHSA-r4fw-jpjq-4wqf

WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00276 Published 2023-03-13 No fix listed CWE-352

TI-2021-07078 CVE-2021-24796 · GHSA-3x29-7jf5-grwh

My Tickets < 1.8.31 - Unauthenticated Stored Cross-Site Scripting

LOW 30

The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenticated users to perfor…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01186 Published 2021-11-17 Fixed in 1.8.31 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0