tickera vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20252
3. 202610

Newest CVEs

• CVE-2026-105889

  WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

  Tickera · Tickera

  Critical9.3
• CVE-2026-82226

  WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability

  Tickera · Tickera

  Critical9.8
• CVE-2026-15448

  Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter

  tickera · Tickera – Sell Tickets & Manage Events

  Medium6.5
• CVE-2026-15761

  Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter

  tickera · Tickera – Sell Tickets & Manage Events

  Medium6.5
• CVE-2026-13755

  Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute

  tickera · Tickera – Sell Tickets & Manage Events

  Medium6.4
• CVE-2026-13754

  Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter

  tickera · Tickera – Sell Tickets & Manage Events

  Medium6.5
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-12356

  Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update

  tickera · Tickera – Sell Tickets & Manage Events

  Medium4.3
• CVE-2025-67939

  WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability

  Tickera · Tickera

  Medium6.5
• CVE-2025-69355

  WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability

  Tickera · Tickera

  Medium4.3