Advisories · Technology
Tickera – Sell Tickets & Manage Events.
Every CVE that names Tickera – Sell Tickets & Manage Events among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter
- Tickera – Sell Tickets & Manage Events
- SQL injection
- CVSS 6.5 Medium
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter
- Tickera – Sell Tickets & Manage Events
- SQL injection
- CVSS 6.4 Medium
Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute
- Tickera – Sell Tickets & Manage Events
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter
- Tickera – Sell Tickets & Manage Events
- SQL injection
- CVSS 4.3 Medium
Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update
- Tickera – Sell Tickets & Manage Events
- Broken access control
- CVSS 5.3 Medium
Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure
- Tickera – Sell Tickets & Manage Events
- Information disclosure
- CVSS 7.3 High
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
- Tickera – Sell Tickets & Manage Events
- Code injection
- CVSS 4.3 Medium
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
- Tickera – Sell Tickets & Manage Events
- Broken access control