Tickera – Sell Tickets & Manage Events vulnerabilities
3 known CVE vulnerabilities in Tickera – Sell Tickets & Manage Events, translated and rated.
- CVE-2026-15761Medium
The Tickera plugin for WordPress is vulnerable to generic SQL injection via the 'tc_event_filter' parameter in versions up to and including 3.6.0.1. This is due to insufficient escaping and lack of query preparation, allowing authenticated attackers with staff-level access or higher to append additional SQL queries.
- CVE-2026-13755Medium
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'price_wrapper' shortcode attribute in all versions up to and including 3.6.0.0 due to insufficient input sanitization and output escaping.
- CVE-2026-13754Medium
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to and including 3.6.0.0 due to insufficient escaping and lack of proper query preparation.