Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Scott Paterson easy-paypal-events-tickets 1.4.0 Clear all filters
TI-2026-30060 CVE-2026-41471 · GHSA-5vmw-2m2g-fj7w

Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint

Priority HIGH 75

The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticated attackers to enumerate and retrieve a…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00349 Published 2026-05-04 Fixed in 1.4.0 CWE-639
TI-2026-25298 CVE-2026-32834 · GHSA-p3hr-535h-p5qw

Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning

Priority HIGH 77

Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass h…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00448 Published 2026-05-04 Fixed in 1.4.0 CWE-798