VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Event Tickets and Registration security & vulnerabilities

event-tickets— active installsLast vulnerability Nov 11, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin
32Known vulnerabilities
  • Critical0
  • High5
  • Medium27
  • Low0
Vulnerabilities per year
2019: 1 vulnerability1192021: 1 vulnerability1212022: 1 vulnerability1222024: 4 vulnerabilities4242025: 5 vulnerabilities5252026: 20 vulnerabilities2026

All Event Tickets and Registration vulnerabilities

Event Tickets and Registration vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
<5.30.3.1Update to 5.30.3.1
CVE-2026-122061
Medium5.3Missing Authorization
<5.30.3.1Update to 5.30.3.1
CVE-2026-122087
Medium4.3Missing Authorization
≤5.30.2Update to 5.30.3
CVE-2026-62047
Medium4.3Missing Authorization
≤5.30.2Update to 5.30.3
CVE-2026-62055
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
≤5.30.1Update to 5.30.2
CVE-2026-110902
Medium5.3Missing Authorization
≤5.30.0.1Update to 5.30.0.2
CVE-2026-105893
Medium4.3Missing Authorization
≤5.30.0.1Update to 5.30.0.2
CVE-2026-105888
Medium4.3Missing Authorization
≤5.30.0.1Update to 5.30.0.2
CVE-2026-105891
Medium4.3Missing Authorization
≤5.30.0Update to 5.30.0.1
CVE-2026-104675
Medium6.5Authenticated (Contributor+) SQL Injection via 'orderby' Parameter
≤5.29.5Update to 5.29.5.1
CVE-2026-97634
Medium6.5Authenticated (Contributor+) SQL Injection
≤5.29.5Update to 5.29.5.1
CVE-2026-97287
High7.2Unauthenticated Stored Cross-Site Scripting
≤5.29.4Update to 5.29.5
CVE-2026-93526
High7.5Missing Authorization to Unauthenticated Stripe Credentials Update
≤5.27.4Update to 5.27.4.1
CVE-2026-3174
High7.2Unauthenticated Stored Cross-Site Scripting
≤5.29.2.1Update to 5.29.3
CVE-2026-78263
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
<5.29.0.1Update to 5.29.0.1
CVE-2026-14823
Medium5.3Missing Authorization
<5.29.0.1Update to 5.29.0.1
CVE-2026-14822
Medium5.3Missing Authorization
≤5.29.0.1Update to 5.29.1
CVE-2026-65567
Medium5.3Missing Authorization
≤5.28.5Update to 5.28.5.1
CVE-2026-57705
Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤5.28.3Update to 5.28.4
CVE-2026-14819
Medium5.3Missing Authorization
≤5.27.5Update to 5.27.6.1
CVE-2026-42662
High7.5Unauthenticated Ticket Payment Bypass
≤5.26.5Update to 5.26.6
CVE-2025-11517
Medium4.3Missing Authorization
≤5.26.3Update to 5.26.4
CVE-2025-62027
Medium6.1Reflected Cross-Site Scripting
≤5.20.0Update to 5.20.1
CVE-2025-30794
Medium5.3Missing Authorization to Ticket Deletion
≤5.19.1.1Update to 5.19.1.2
CVE-2025-1402
Medium5.3Insecure Direct Object Reference to Sensitive Information Exposure
≤5.18.1Update to 5.18.1.1
CVE-2024-13457
Medium4.3Cross-Site Request Forgery
≤5.11.0.4Update to 5.11.0.5
CVE-2024-38762
Medium4.3Improper Authorization to Information Disclosure
≤5.8.2Update to 5.8.3
CVE-2024-2261
Medium4.3Missing Authorization
≤5.8.1Update to 5.8.2
CVE-2024-1053
Medium4.3Authenticated (Contributor+) Information Exposure
≤5.8.0Update to 5.8.1
CVE-2024-1316
Medium6.3Missing Authorization Checks
all versionsNo patch available
CVE-2022-4974
Medium6.1Open Redirect
≤5.2.1Update to 5.2.2
CVE-2021-25028
High8.8CSV Injection
≤4.10.7.1Update to 4.10.7.2
CVE-2019-16120

Event Tickets and Registration: common questions

Does Event Tickets and Registration have known vulnerabilities?

Yes. VulnCrest Radar lists 32 known vulnerabilities in Event Tickets and Registration: 5 high, 27 medium. At least one is not fixed in the latest version.

How do I check which version of Event Tickets and Registration I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Event Tickets and Registration vulnerability?

CVE-2026-122061, published Nov 11, 2026: Event Tickets and Registration < 5.30.3.1 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any Event Tickets and Registration vulnerability listed in CISA KEV?

No. None of the known Event Tickets and Registration vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?