TI
Vendor
Tickera
23
CVEs
0
On KEV
1
New 30D
Products
TI9.8
Tickera
Tickera
12 CVEs0 on KEV1 new
TS7.3
Tickera – Sell Tickets & Manage Events
tickera
8 CVEs0 on KEV0 new
RE6.1
Restrict
Tickera
1 CVEs0 on KEV0 new
RF5.3
Restrict For Elementor
Tickera
1 CVEs0 on KEV0 new
RM5.3
Restrict – membership, site, content and user access restrictions for WordPress
tickera
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105889 | TI Tickera Tickera | 9.3 | Oct 10 | WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability |
| CVE-2026-82226 | TI Tickera Tickera | 9.8 | Aug 31 | WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability |
| CVE-2026-15448 | TS Tickera – Sell Tickets & Manage Events tickera | 6.5 | Jul 23 | Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter |
| CVE-2026-15761 | TS Tickera – Sell Tickets & Manage Events tickera | 6.5 | Jul 23 | Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter |
| CVE-2026-13755 | TS Tickera – Sell Tickets & Manage Events tickera | 6.4 | Jul 16 | Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute |
| CVE-2026-13754 | TS Tickera – Sell Tickets & Manage Events tickera | 6.5 | Jul 16 | Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter |
| CVE-2025-12356 | TS Tickera – Sell Tickets & Manage Events tickera | 4.3 | Feb 18 | Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update |
| CVE-2025-67939 | TI Tickera Tickera | 6.5 | Jan 22 | WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability |
| CVE-2025-69355 | TI Tickera Tickera | 4.3 | Jan 6 | WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability |
| CVE-2025-58611 | TI Tickera Tickera | 4.3 | Sep 3 | WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-30851 | TI Tickera Tickera | 4.3 | Mar 27 | WordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability |
| CVE-2024-12578 | TS Tickera – Sell Tickets & Manage Events tickera | 5.3 | Dec 14 | Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure |
| CVE-2024-11351 | RM Restrict – membership, site, content and user access restrictions for WordPress tickera | 5.3 | Dec 11 | Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-10263 | TS Tickera – Sell Tickets & Manage Events tickera | 7.3 | Nov 5 | Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2024-5860 | TS Tickera – Sell Tickets & Manage Events tickera | 4.3 | Jun 18 | Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion |
| CVE-2024-35729 | TI Tickera Tickera | 8.8 | Jun 10 | WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability |
| CVE-2024-0910 | RF Restrict For Elementor Tickera | 5.3 | Jun 6 | Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass |
| CVE-2023-7252 | TI Tickera Tickera | 5.3 | Apr 22 | Tickera < 3.5.2.5 - Ticket leakage through IDOR |
| CVE-2023-41861 | RE Restrict Tickera | 6.1 | Sep 26 | WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-4549 | TI Tickera Tickera | 4.3 | Jan 16 | Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF |
| CVE-2021-24797 | TI Tickera Tickera | 6.1 | Dec 27 | Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting |