Tickera WordPress Plugin Unauthenticated Arbitrary Shortcode Execution

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Tickera - WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution 2. Vulnerability Type: Improper Control of Generation of Code (Code Injection) 3. CVSS Score: 7.3 (High) 4. Public Release Date: November 4, 2024 5. Update Date: November 5, 2024 6. Researcher: Arkadiusz Hydzik 7. Affected Versions: <= 3.5.4.4 8. Fixed Version: 3.5.4.6 9. Remediation: Update to version 3.5.4.6 or a later fixed version. 10. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 11. Reference Link: plugins.trac.wordpress.org 12. Vulnerability Database: Wordfence Intelligence Vulnerability Database 13. Vulnerability Score: 7.3 (High) 14. Vulnerability Public Date: November 4, 2024 15. Vulnerability Update Date: November 5, 2024 16. Researcher: Arkadiusz Hydzik 17. Affected Versions: <= 3.5.4.4 18. Fixed Version: 3.5.4.6 19. Remediation: Update to version 3.5.4.6 or a later fixed version. 20. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 21. Reference Link: plugins.trac.wordpress.org 22. Vulnerability Database: Wordfence Intelligence Vulnerability Database 23. Vulnerability Score: 7.3 (High) 24. Vulnerability Public Date: November 4, 2024 25. Vulnerability Update Date: November 5, 2024 26. Researcher: Arkadiusz Hydzik 27. Affected Versions: <= 3.5.4.4 28. Fixed Version: 3.5.4.6 29. Remediation: Update to version 3.5.4.6 or a later fixed version. 30. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 31. Reference Link: plugins.trac.wordpress.org 32. Vulnerability Database: Wordfence Intelligence Vulnerability Database 33. Vulnerability Score: 7.3 (High) 34. Vulnerability Public Date: November 4, 2024 35. Vulnerability Update Date: November 5, 2024 36. Researcher: Arkadiusz Hydzik 37. Affected Versions: <= 3.5.4.4 38. Fixed Version: 3.5.4.6 39. Remediation: Update to version 3.5.4.6 or a later fixed version. 40. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 41. Reference Link: plugins.trac.wordpress.org 42. Vulnerability Database: Wordfence Intelligence Vulnerability Database 43. Vulnerability Score: 7.3 (High) 44. Vulnerability Public Date: November 4, 2024 45. Vulnerability Update Date: November 5, 2024 46. Researcher: Arkadiusz Hydzik 47. Affected Versions: <= 3.5.4.4 48. Fixed Version: 3.5.4.6 49. Remediation: Update to version 3.5.4.6 or a later fixed version. 50. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 51. Reference Link: plugins.trac.wordpress.org 52. Vulnerability Database: Wordfence Intelligence Vulnerability Database 53. Vulnerability Score: 7.3 (High) 54. Vulnerability Public Date: November 4, 2024 55. Vulnerability Update Date: November 5, 2024 56. Researcher: Arkadiusz Hydzik 57. Affected Versions: <= 3.5.4.4 58. Fixed Version: 3.5.4.6 59. Remediation: Update to version 3.5.4.6 or a later fixed version. 60. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 61. Reference Link: plugins.trac.wordpress.org 62. Vulnerability Database: Wordfence Intelligence Vulnerability Database 63. Vulnerability Score: 7.3 (High) 64. Vulnerability Public Date: November 4, 2024 65. Vulnerability Update Date: November 5, 2024 66. Researcher: Arkadiusz Hydzik 67. Affected Versions: <= 3.5.4.4 68. Fixed Version: 3.5.4.6 69. Remediation: Update to version 3.5.4.6 or a later fixed version. 70. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running , enabling unauthenticated attackers to execute arbitrary shortcodes. 71. Reference Link: plugins.trac.wordpress.org 72. Vulnerability Database: Wordfence Intelligence Vulnerability Database 73. Vulnerability Score: 7.3 (High) 74. Vulnerability Public Date: November 4, 2024 75. Vulnerability Update Date: November 5, 2024 76. Researcher: Arkadiusz Hydzik 77. Affected Versions: <= 3.5.4.4 78. Fixed Version: 3.5.4.6 79. Remediation: Update to version 3.5.4.6 or a later fixed version. 80. Vulnerability Description: The plugin allows users to execute an action that does not properly sanitize values before running ,

Goal Reached Thanks to every supporter — we hit 100%!

Tickera WordPress Plugin Unauthenticated Arbitrary Shortcode Execution

More from this source