CVE-2025-67939
- EPSS 0.04%
- Veröffentlicht 22.01.2026 16:51:53
- Zuletzt bearbeitet 28.01.2026 20:16:11
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.6.2.
CVE-2025-69355
- EPSS 0.03%
- Veröffentlicht 06.01.2026 16:36:41
- Zuletzt bearbeitet 20.01.2026 15:20:04
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.6.4.
CVE-2025-58611
- EPSS 0.02%
- Veröffentlicht 03.09.2025 14:36:45
- Zuletzt bearbeitet 04.09.2025 15:35:29
Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera allows Cross Site Request Forgery. This issue affects Tickera: from n/a through 3.5.5.6.
CVE-2025-30851
- EPSS 0.17%
- Veröffentlicht 27.03.2025 10:55:27
- Zuletzt bearbeitet 27.03.2025 16:45:12
Missing Authorization vulnerability in Tickera Tickera allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Tickera: from n/a through 3.5.5.2.
CVE-2023-23726
- EPSS 0.12%
- Veröffentlicht 09.12.2024 13:15:20
- Zuletzt bearbeitet 09.12.2024 13:15:20
Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affects Tickera: from n/a through 3.5.1.0.
CVE-2024-10263
- EPSS 1.62%
- Veröffentlicht 05.11.2024 13:15:03
- Zuletzt bearbeitet 08.11.2024 15:59:41
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This is due to the software allowing users to execute an action that does not properly validate...
CVE-2024-5860
- EPSS 0.12%
- Veröffentlicht 18.06.2024 04:15:11
- Zuletzt bearbeitet 21.11.2024 09:48:29
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tc_dl_delete_tickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible fo...
CVE-2024-35729
- EPSS 0.3%
- Veröffentlicht 10.06.2024 08:15:50
- Zuletzt bearbeitet 21.11.2024 09:20:45
Missing Authorization vulnerability in Tickera.This issue affects Tickera: from n/a through 3.5.2.6.
CVE-2023-7252
- EPSS 0.33%
- Veröffentlicht 22.04.2024 05:15:07
- Zuletzt bearbeitet 30.05.2025 16:08:20
The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.
CVE-2022-4549
- EPSS 0.14%
- Veröffentlicht 16.01.2023 16:15:13
- Zuletzt bearbeitet 04.04.2025 18:15:45
The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.