TTickera

Products

Exploited and recent CVEs

• CVE-2026-105889 Critical 9.3 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability 0.2%
• CVE-2026-82226 Critical 9.8 WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability 0.6%
• CVE-2026-15448 Medium 6.5 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter 0.4%
• CVE-2026-15761 Medium 6.5 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter 0.5%
• CVE-2026-13755 Medium 6.4 Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute 0.4%
• CVE-2026-13754 Medium 6.5 Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter 0.4%
• CVE-2025-12356 Medium 4.3 Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update 0.3%
• CVE-2025-67939 Medium 6.5 WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability 0.4%
• CVE-2025-69355 Medium 4.3 WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability 0.2%
• CVE-2025-58611 Medium 4.3 WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
• CVE-2025-30851 Medium 4.3 WordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability 0.3%
• CVE-2024-12578 Medium 5.3 Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure 0.5%
• CVE-2024-11351 Medium 5.3 Restrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.4%
• CVE-2024-10263 High 7.3 Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution 0.5%
• CVE-2024-5860 Medium 4.3 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion 0.3%
• CVE-2024-35729 Medium 5.3 WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability 0.3%