IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
4.3Media

CVE-2026-62055WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Liquid Web / StellarWP Event Tickets Publicada: (hace 5 días)

Descripción

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

Debilidad (CWE): CWE-862

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Liquid Web / StellarWP Event Tickets ≤ 5.30.2

Referencias y parches

CVE recientes del mismo producto — WordPress plugins & themes

Sin puntuación
CVE-2026-109150

WP PageNavi Style <= 1.4 - Stored XSS via CSRF

WP PageNavi Style

The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when they are saved, which could allow attackers to make a logged-in administrator store arbitrary JavaScript via a CSRF attack that is…

Sin puntuación
CVE-2026-107775

Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that the acting administrator is authorized to manage each selected user before enabling that user's marketplace seller status, allowing a subsit…

Sin puntuación
CVE-2026-107786

CatFolders < 2.5.7 - Author+ SQLi via 'sortFile' Setting

CatFolders

The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL query, allowing authenticated users with upload capability (Author and above) to perform SQL injection attacks.