CVE-2026-110902mediumCWE-639

CVE-2026-110902: falha de média gravidade em Liquid Web / StellarWP Event Tickets

WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability

Publicada em

Seguir esta CVE+ Monitorar Event Tickets

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Liquid Web / StellarWP · Event Tickets
CVEs relacionadas — Liquid Web / StellarWP Event Tickets

No mesmo produto, das mais perigosas para as menos.

CVE-2026-42662MEDIUMWordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-62055MEDIUMWordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-105893MEDIUMWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-62047MEDIUMWordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97287HIGHWordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-105891MEDIUMWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityEPSS 0.2%