CVE-2026-42662
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Event Tickets versions up to 5.27.5 contain a vulnerability that allows unauthenticated bypass of security measures.
Risk Assessment
Organizations may be exposed to unauthorized access to ticket-related functions, potentially leading to abuse.
Recommendation
It is recommended to update to the latest version of Event Tickets to mitigate this vulnerability.
Other vulnerabilities in Event Tickets
See all- CVE-2026-65567Medium
The Event Tickets plugin version 5.29.0.1 and earlier has a broken access control vulnerability without authentication. An unauthenticated attacker can access functions intended for authorized users.
- CVE-2026-78263High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Event Tickets versions up to and including 5.29.2.1.
- CVE-2026-57705High
The Event Tickets plugin for WordPress contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 5.28.5.
Original NVD description (English source)
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.