CVE-2019-16120

ALTO 8.8CVE-2019-16120 · Published 08/09/2019 · updated 17/06/2026

In breve

CVE-2019-16120 è una vulnerabilità ALTO (CVSS 8.8) che riguarda event tickets (liquidweb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.2%, superiore al 88.2% delle vulnerabilità.
Correzione: aggiornare a 4.10.7.2 o successiva.

Package	Affected versions	Patched versions
event tickets liquidweb	`< 4.10.7.2`	`4.10.7.2`

Description

CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.

References

wordpress.org/plugins/event-tickets · Product
wpvulndb.com/vulnerabilities/9858 · Third Party Advisory
exploit-db.com/exploits/47335 · Exploit

Altre vulnerabilità di event tickets

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free