CVE-2026-121858mediumCWE-89

CVE-2026-121858: fallo de gravedad media en Event Tickets with Ticket Scanner

Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search

Publicada el

Seguir esta CVE+ Monitorear Event Tickets with Ticket Scanner

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 6.3epss 0.2%
The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Productos afectados
Unknown · Event Tickets with Ticket Scanner
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Event Tickets with Ticket Scanner

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-6711LOWEvent Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSSEPSS 0.3%CVE-2025-1762MEDIUMEvent Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRFEPSS 0.2%CVE-2026-121857MEDIUMEvent Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackendEPSS 0.1%