theeventscalendar

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

theeventscalendar records in CISA KEV

No theeventscalendar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eventcalendar 2 records LOW Event Tickets 1 record LOW Eventbrite Tickets 1 record LOW Events Calendar Pro 1 record MEDIUM The Events Calendar 1 record LOW

Records

1 record in Event Tickets · all components

TI-2025-01205 CVE-2025-1402 · GHSA-f92c-pvc8-f6h9

Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion

LOW 30

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajax_ticket_delete' function in all versions up to, and including, 5.19.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00445 Published 2025-02-21 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	6
Low	0
No CVSS	0