CVE Intelligence

Nexcess Event Tickets vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nexcess Event Tickets: 4 record(s), with affected versions and fixes.

CVE-2026-93526 High · 7.1 CWE-79 Sep 23, 2026
WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions.
CVE-2026-78263 High · 7.1 CWE-79 Aug 24, 2026
WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.
CVE-2026-65567 Medium · 5.3 CWE-862 Jul 27, 2026
WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.
CVE-2026-57705 High · 7.5 CWE-862 Jul 13, 2026
WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through <= 5.28.5.