Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Event Tickets and Registration 5.29.0.1 Clear all filters
TI-2026-12493 CVE-2026-14823 · GHSA-cfmh-2g6m-xpvm

Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR

Priority MEDIUM 45

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating l…

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.00232 Published 2026-08-01 Fixed in 5.29.0.1 CWE-639
TI-2026-12492 CVE-2026-14822 · GHSA-rpwc-gx32-cjcf

Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation

Priority MEDIUM 63

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-08-01 Fixed in 5.29.0.1 CWE-284