Vulnerabilidades de Tickera
CVEs publicadas que afetam produtos de Tickera: 5 registro(s), com severidade, exploração e correções.
Tickera 3Tickera – Sell Tickets & Manage Events 1Restrict – membership, site, content and user access restrictions for WordPress 1
CVE-2026-105889
Crítica · 9.3
CWE-89 10/10/2026
Plugin Tickera para WordPress: Injeção de SQL
Neutralização imprópria de elementos especiais usados em um comando SQL ('Injeção de SQL') na Tickera Tickera tickera-event-ticketing-system permite Injeção de SQL Cega.Esta questão afeta o Tickera: de n/a até 3.6.0.6.
CVE-2024-13362
Média · 6.1
CWE-79 01/05/2026
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVE-2025-12356
Média · 4.3
CWE-862 18/02/2026
Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_change_ticket_status' AJAX endpoint in all versions up to, and including, 3.5.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update post/event statuses.
CVE-2025-67939
Média · 6.5
CWE-862 22/01/2026
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.6.2.
CVE-2025-69355
Média · 4.3
CWE-862 06/01/2026
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.6.4.