Login Request a demo
PR
Vendor
pretix
17 products with CVEs on record
45
CVEs
0
On KEV
6
New 30D
Products
PR
pretix
pretix
9.8
21 CVEs0 on KEV6 new
VE
venueless
pretix
7.3
6 CVEs0 on KEV0 new
PR
pretix-oppwa
pretix
9.0
3 CVEs0 on KEV0 new
PR
pretix-mollie
pretix
7.7
2 CVEs0 on KEV0 new
DO
Double Opt IN Step
Pretix
6.5
1 CVEs0 on KEV0 new
NE
Newsletters
Pretix
6.5
1 CVEs0 on KEV0 new
PR
pretix-bitpay
pretix
7.7
1 CVEs0 on KEV0 new
PR
pretix-computop
pretix
6.3
1 CVEs0 on KEV0 new
PR
pretix-digital
pretix
2.0
1 CVEs0 on KEV0 new
PR
pretix-doistep
pretix
6.5
1 CVEs0 on KEV0 new
PR
pretix-newsletter
pretix
6.5
1 CVEs0 on KEV0 new
PR
pretix-offlinesales
pretix
3.8
1 CVEs0 on KEV0 new
PR
pretix-pages
pretix
2.1
1 CVEs0 on KEV0 new
PR
pretix-payone
pretix
7.7
1 CVEs0 on KEV0 new
PR
pretix-saferpay
pretix
7.7
1 CVEs0 on KEV0 new
PR
pretix-secuconnect
pretix
7.7
1 CVEs0 on KEV0 new
PR
pretix-sofort
pretix
7.7
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-101271
PR
pretix
pretix
2.1
0%
Sep 29OAuth credentials not disabled when application is disabled
CVE-2026-101270
PR
pretix
pretix
2.1
0%
Sep 29HTML injection
CVE-2026-101269
PR
pretix
pretix
2.3
0%
Sep 29Incorrect session validation for API-uploaded files
CVE-2026-101268
PR
pretix
pretix
1.7
0%
Sep 29Customer session fixation
CVE-2026-101267
PR
pretix
pretix
2.7
0%
Sep 29Revenue information leak
CVE-2026-101266
PR
pretix
pretix
1.3
0%
Sep 29Checkout validation bypass
CVE-2026-82838
VE
venueless
pretix
6.4
0%
Aug 31Default webserver configuration with incorrect CSP
CVE-2026-13602
PR
pretix-payone
pretix
7.7
0%
Jul 1Session takeover vulnerability
CVE-2026-13603
PR
pretix-oppwa
pretix
9.0
0%
Jul 1SSRF with API key leak in pretix-oppwa
CVE-2026-13350
VE
Venueless
pretix
2.3
0%
Jun 25Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create
CVE-2026-57532
PR
pretix
pretix
8.8
0%
Jun 25Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the browser
CVE-2026-57533
PR
pretix
pretix
2.1
0%
Jun 25Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs
CVE-2026-57535
PR
pretix
pretix
2.1
0%
Jun 25Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags
CVE-2026-13225
PR
pretix
pretix
5.3
0%
Jun 25Stored XSS in ticket confirmation page
CVE-2026-57534
PR
pretix-pages
pretix
2.1
0%
Jun 25Stored XSS in pretix-pages
CVE-2026-57536
PR
pretix-mollie
pretix
6.3
0%
Jun 25Insufficient validation of payment status in pretix-mollie
CVE-2026-13222
PR
pretix-oppwa
pretix
6.3
0%
Jun 25Insufficient validation of payment status in pretix-oppwa
CVE-2026-13223
PR
pretix-computop
pretix
6.3
0%
Jun 25Insufficient validation of payment status in pretix-computop
CVE-2026-13314
PR
pretix-digital
pretix
2.0
0%
Jun 25Stored XSS in pretix-digital
CVE-2026-12863
VE
Venueless
pretix
5.1
0%
Jun 22Open redirect
CVE-2026-12862
VE
Venueless
pretix
5.1
0%
Jun 22XLSX formula injection in exports
CVE-2026-11764
PR
pretix
pretix
3.6
0%
Jun 9Data exposed without proper permission
CVE-2026-9712
PR
pretix
pretix
3.8
0%
May 27Insecure direct object reference
CVE-2026-5600
PR
pretix
pretix
4.3
0%
Apr 8A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the respective…
CVE-2026-5599
VE
Venueless
pretix
7.3
0%
Apr 5API allows deletion of users of other instance
CVE-2026-4982
VE
Venueless
pretix
7.3
0%
Mar 27Unauthorized access to chat contents
CVE-2026-2452
PR
pretix-newsletter
pretix
6.5
0%
Feb 16Unsafe variable evaluation in email templates
CVE-2026-2451
PR
pretix-doistep
pretix
6.5
0%
Feb 16Unsafe variable evaluation in email templates
CVE-2026-2415
PR
pretix
pretix
5.9
0%
Feb 16Unsafe variable evaluation in email templates
CVE-2025-14881
PR
pretix
pretix
3.8
0%
Dec 19Insecure direct object reference
CVE-2025-14882
PR
pretix-offlinesales
pretix
3.8
0%
Dec 19Insecure direct object reference
CVE-2025-13742
PR
pretix
pretix
6.1
0%
Nov 27Limited HTML injection in emails
CVE-2024-8113
PR
Pretix
Pretix
5.4
0%
Aug 23Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page
CVE-2024-27447
PR
Pretix
Pretix
9.8
1%
Feb 26pretix before 2024.1.1 mishandles file validation