Vulnerabilities / Event Tickets and Registration
Event Tickets and Registration vulnerabilities
Advisories WPSec published for Event Tickets and Registration. Other sources may list more. Its attack surface: Event Tickets and Registration on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1141 | Event Tickets and Registration <= 5.30.1 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Ticket and Attendee Deletion | Medium 4.3 | 5.30.2 |
| 2026-10-07 | WPSEC-2026-0522 | Event Tickets and Registration <= 5.30.0.1 - Unauthenticated Payment Bypass via RSVP Order REST Endpoint | Medium 5.3 | 5.30.0.2 |
| 2026-10-07 | WPSEC-2026-0521 | Event Tickets and Registration <= 5.30.0.1 - Authenticated (Subscriber+) Missing Authorization to Attendee QR Check-In Status Modification | Medium 4.3 | 5.30.0.2 |
| 2026-10-01 | WPSEC-2026-0027 | Event Tickets and Registration <= 5.29.5.1 - Unauthenticated Business Logic Error to Seat Overbooking via Duplicate Reservation IDs | Medium 5.3 | 5.29.5.2 |
| 2026-10-01 | WPSEC-2026-0026 | Event Tickets and Registration <= 5.29.5.2 - Authenticated (Contributor+) Missing Authorization to Ticket Creation and Modification via REST API | Medium 4.3 | 5.30.0 |
License: CC BY 4.0