CVE-2026-34898

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

There is an unauthenticated broken access control in Event Tickets Manager for WooCommerce versions <= 1.5.3.

An attacker could gain access to functions that should be protected, potentially leading to unauthorized ticket management.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions.