Tickera Tickera – Sell Tickets & Manage Events

• CVE-2026-15448 Medium 6.5 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter 0.4%
• CVE-2026-15761 Medium 6.5 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter 0.5%
• CVE-2026-13755 Medium 6.4 Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute 0.4%
• CVE-2026-13754 Medium 6.5 Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter 0.4%
• CVE-2025-12356 Medium 4.3 Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update 0.3%
• CVE-2024-12578 Medium 5.3 Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure 0.5%
• CVE-2024-10263 High 7.3 Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution 0.5%
• CVE-2024-5860 Medium 4.3 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion 0.3%