Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Tickera – Sell Tickets & Manage Events — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Tickera – Sell Tickets & Manage Events, with AI-generated Chinese analysis, references, and POCs.

Vendor: tickera

CVE IDTitleCVSSSeverityPublished
CVE-2026-15448 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter CWE-89 6.5 Medium2026-07-23
CVE-2026-15761 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter CWE-89 6.5 Medium2026-07-23
CVE-2026-13755 Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute CWE-79 6.4 Medium2026-07-16
CVE-2026-13754 Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter CWE-89 6.5 Medium2026-07-16
CVE-2025-12356 Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update CWE-862 4.3 Medium2026-02-18
CVE-2024-12578 Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure CWE-200 5.3 Medium2024-12-14
CVE-2024-10263 Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution CWE-94 7.3 High2024-11-05
CVE-2024-5860 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion CWE-862 4.3 Medium2024-06-18

All 8 known CVE vulnerabilities affecting Tickera – Sell Tickets & Manage Events with full Chinese analysis, references, and POCs where available.