WordPress plugin
Event Tickets and Registration security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High5
- Medium27
- Low0
All Event Tickets and Registration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.29.4Update to 5.29.5 | CVE-2026-93526 | |
| High7.5 | Missing Authorization to Unauthenticated Stripe Credentials Update ≤5.27.4Update to 5.27.4.1 | CVE-2026-3174 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.29.2.1Update to 5.29.3 | CVE-2026-78263 | |
| High7.5 | Unauthenticated Ticket Payment Bypass ≤5.26.5Update to 5.26.6 | CVE-2025-11517 | |
| High8.8 | CSV Injection ≤4.10.7.1Update to 4.10.7.2 | CVE-2019-16120 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.29.4Update to 5.29.5
- High7.5Missing Authorization to Unauthenticated Stripe Credentials Update
≤5.27.4Update to 5.27.4.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.29.2.1Update to 5.29.3
- High7.5Unauthenticated Ticket Payment Bypass
≤5.26.5Update to 5.26.6
- High8.8CSV Injection
≤4.10.7.1Update to 4.10.7.2
Event Tickets and Registration: common questions
Does Event Tickets and Registration have known vulnerabilities?
Yes. VulnCrest Radar lists 32 known vulnerabilities in Event Tickets and Registration: 5 high, 27 medium. At least one is not fixed in the latest version.
How do I check which version of Event Tickets and Registration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Event Tickets and Registration vulnerability?
CVE-2026-122061, published Nov 11, 2026: Event Tickets and Registration < 5.30.3.1 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Event Tickets and Registration vulnerability listed in CISA KEV?
No. None of the known Event Tickets and Registration vulnerabilities is currently listed in the CISA KEV catalog.