Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Events Tickets Plus 5.9.1 Clear all filters
TI-2024-01225 CVE-2024-1316 · GHSA-wgfc-mmg5-p2xv

Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access

Priority MEDIUM 62

The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00604 Published 2024-03-04 Fixed in 5.8.1, 5.9.1
TI-2024-01228 CVE-2024-1319 · GHSA-j63f-r65c-3x8x

Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure

Priority MEDIUM 53

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00456 Published 2024-03-04 Fixed in 5.9.1