2.2
Low
CVE-2026-14823 The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of…
Description
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Event Tickets and Registration 5.29 | earliest → < 5.29.0.1 | 5.29.0.1 |
Other CVEs of Event Tickets and Registration
The 4 CVEs of Event Tickets and Registration →
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of…
5.3
Medium
CVE-2026-14819
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before…
3.5
Low
CVE-2024-1316
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does…
6.5
Medium