ET
Product
Event Tickets
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Event Tickets to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16120 | 8.8 | Sep 8 | CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature Affected: before 4.10.7.2 |
| CVE-2024-1316 | 6.5 | Mar 4 | Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access Affected: before 5.8.1; before 5.9.1 |
| CVE-2024-13457 | 5.3 | Jan 30 | Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure Affected: before 5.18.1.1 |
| CVE-2024-1319 | 4.3 | Mar 4 | Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure Affected: before 5.9.1 |
| CVE-2024-1053 | 4.3 | Feb 22 | Event Tickets and Registration <= 5.8.1 - Missing Authorization Affected: before 5.8.2 |
Showing 5