Vulnerabilidades do Liquid Web / StellarWP Event Tickets

CVE-2026-105893 Média · 5.3 CWE-639 08/10/2026

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.

CVE-2026-105891 Média · 4.3 CWE-862 08/10/2026

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.

CVE-2026-105888 Média · 5.4 CWE-862 08/10/2026

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.

CVE-2026-104675 Média · 4.3 CWE-862 05/10/2026

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.

CVE-2026-97287 Alta · 8.5 CWE-89 30/09/2026

WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.

CVE-2026-42662 Média · 6.5 CWE-290 15/06/2026

WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.