Advisories · Technology
Tickera.
Every CVE that names Tickera among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN
- Tickera
- CWE-345
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability
- Tickera
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
- Tickera
- Insecure deserialization
- CVSS 6.5 Medium
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
- Tickera
- Broken access control
- CVSS 4.3 Medium
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
- Tickera
- Broken access control
- CVSS 4.3 Medium
WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability
- Tickera
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability
- Tickera
- Broken access control
- CVSS 5.4 Medium
WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.1.0 - CSRF Leading To Post Status Change Vulnerability
- Tickera
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
- Tickera
- Broken access control
- CVSS 5.3 Medium
Tickera < 3.5.2.5 - Ticket leakage through IDOR
- Tickera
- CVSS 4.3 Medium
Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
- Tickera