Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-123129— Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price Manipulation

Quick assessment

Affected
Unknown Event Tickets Manager for WooCommerce
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WooCommerce WordPress 插件"Event Tickets Manager"在 1.6.0 版本之前存在安全漏洞：当引用的产品未配置任何票种时，该插件未对其未认证的 AJAX 操作中所接收的票种价格进行验证，并将提交的价格存储至整个站点范围内。该价格会被应用于后续添加到任何购物车中的活动门票，从而允许未认证的访问者以任意价格（包括免费）购买活动门票。 此漏洞是由于 CVE-2026-34898 的修复不完整所致。

AI Predicted 8.6 Difficulty: Trivial

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-123129

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price Manipulation
Source: CVE Program / CVE List V5
Vulnerability Description
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free. This is due to an incomplete fix of CVE-2026-34898.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown Event Tickets Manager for WooCommerce 1.5.4 ~ 1.6.0 -

II. Public POCs for CVE-2026-123129

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-123129

请登录查看更多情报信息。

Other References for CVE-2026-123129 (1)

Same Patch Batch · Unknown · 2026-11-09 · 23 CVEs total

CVE-2026-115252 10.0 CRITICAL Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option
CVE-2026-106466 7.5 HIGH JWT Auth <= 3.0.2 - Unauthenticated Account Access Persistence via Insufficient Refresh To
CVE-2026-106008 5.3 MEDIUM FraudLabs Pro SMS Verification 1.11.2 - 1.12.1 - Unauthenticated SMS Verification Bypass v
CVE-2026-115204 AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_import
CVE-2026-115237 Grand Job <= 1.2.1 - Unauthenticated Account Takeover via Empty Password Reset Code
CVE-2026-115213 EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authenticatio
CVE-2026-115212 mView <= 1.0.3 - Subscriber+ Arbitrary File Upload
CVE-2026-115256 Mail Debug for WooCommerce <= 1.3.0 - Unauthenticated Sent Email Disclosure Leading to Acc
CVE-2026-120409 All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via
CVE-2026-118201 Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPC
CVE-2026-118202 Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-F
CVE-2026-121759 Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDOR
CVE-2026-121874 Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option Name
CVE-2026-123091 Vigilant < 2.11.0 - 2FA Bypass via Third-Party Login Forms
CVE-2026-123064 WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege Escalat
CVE-2026-123088 UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII
CVE-2026-123128 GemBooking < 1.7.1 - Unauthenticated Team Member Double-Booking via Cross-Object Race Cond
CVE-2026-121875 Post Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability Assignme
CVE-2026-81422 Advanced Appointment Booking & Scheduling < 2.7 - Unauthenticated Arbitrary User Registrat
CVE-2026-123131 GemBooking < 1.7.1 - Staff+ Arbitrary Post Deletion and Site Settings Update via REST Cont

Showing top 20 of 23 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Event Tickets Manager for WooCommerce
Same vendor: Unknown