2.2
Faible
CVE-2026-14823 The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of…
Description
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Event Tickets and Registration 5.29 | premières → < 5.29.0.1 | 5.29.0.1 |
Autres CVE de Event Tickets and Registration
Les 4 CVE de Event Tickets and Registration →
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of…
5.3
Moyenne
CVE-2026-14819
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before…
3.5
Faible
CVE-2024-1316
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does…
6.5
Moyenne