6.5
Medium
CVE-2024-1316 The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does…
Description
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Event Tickets and Registration 5.8 | earliest → < 5.8.1 | 5.8.1 |
| Events Tickets Plus 5.9 | earliest → < 5.9.1 | 5.9.1 |
| eventbrite_tickets 5.8 | earliest → < 5.8.1 | 5.8.1 |
Other CVEs of Event Tickets and Registration
The 4 CVEs of Event Tickets and Registration →
CVE-2026-14823
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of…
2.2
Low
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of…
5.3
Medium
CVE-2026-14819
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before…
3.5
Low