CVE-2023-7252 The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets

Description

The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.

Affected products and versions

Product	Affected versions	Fixed in
Tickera 3.5	earliest → < 3.5.2.5	3.5.2.5
Tickera 3.5	earliest → < 3.5.2.5	3.5.2.5

Other CVEs of Tickera

The 3 CVEs of Tickera →

CVE-2026-88998 The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications,… 5.3 Medium CVE-2022-4549 The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could… 4.3 Medium