Known vulnerabilities in StellarWP Event Tickets and Registration
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-97634 | The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby'… | 6.5 Medium | Oct 2, 2026 |
| CVE-2026-3174 | The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a… | 7.5 High | Sep 8, 2026 |
| CVE-2025-11517 | The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and… | 7.5 High | Oct 18, 2025 |
| CVE-2025-1402 | The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing… | 5.3 Medium | Feb 21, 2025 |
| CVE-2024-13457 | The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all… | 5.3 Medium | Jan 30, 2025 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
| CVE-2024-2261 | The Event Tickets and Registration plugin for WordPress is vulnerable to Sensitive Information Exposure in all… | 4.3 Medium | Apr 9, 2024 |
| CVE-2024-1053 | The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized access of data due to a missing… | 4.3 Medium | Feb 22, 2024 |
Other StellarWP products
GiveWP – Donation Plugin and Fundraising Platform 34
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Membership Plugin – Restrict Content 7
LearnDash LMS 7
WPComplete 4
Kadence WooCommerce Email Designer 4
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Bookit — Booking & Appointment Calendar 3
Restrict Content 2