Advisories · Technology
stellarwp Event Tickets and Registration.
Every CVE that names stellarwp Event Tickets and Registration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' Parameter
- stellarwp Event Tickets and Registration
- SQL injection
- CVSS 7.5 High
Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update
- stellarwp Event Tickets and Registration
- Broken access control
- CVSS 7.5 High
Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass
- stellarwp Event Tickets and Registration
- Broken access control
- CVSS 5.3 Medium
Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion
- stellarwp Event Tickets and Registration
- Broken access control
- CVSS 5.3 Medium
Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure
- stellarwp Event Tickets and Registration
- Broken access control
- CVSS 4.3 Medium
Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
- stellarwp Event Tickets and Registration
- Broken access control
- CVSS 4.3 Medium
Event Tickets and Registration <= 5.8.1 - Missing Authorization
- stellarwp Event Tickets and Registration
- Broken access control