CVE-2024-35729

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-wordpress-event-ticketing-plugin-3-5-2-6-broken-access-control-vulnerability
• patchstack.com/database/vulnerability/tickera-event-ticketing-system/wordpress-tickera-wordpress-event-ticketing-plugin-3-5-2-6-broken-access-control-vulnerability · Third Party Advisory

tickera のその他の脆弱性

• CVE-2024-10263高 7.3The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inclu…
• CVE-2024-5860中 4.3The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on…
• CVE-2023-7252中 5.3The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.
• CVE-2022-4549中 4.3The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to mak…
• CVE-2021-24797中 6.1The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events before outputting them in…