Vulnerabilidades em Tickera
16 resultadosAnálise Vexday
Tickera apresenta um perfil de risco baixo com apenas 5 vulnerabilidades catalogadas e nenhuma sob ataque ativo. Não há CVEs críticas nem divulgações recentes, indicando que o risco é estável e não constitui ameaça imediata. A fraqueza dominante é controle de acesso inadequado (CWE-862), sugerindo déficit em autorização de recursos, sem urgência aparente para remediação.
CVE-2024-10263HIGHTickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2024-12578MEDIUMTickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data ExposureEPSS 0.5%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-11351MEDIUMRestrict – membership, site, content and user access restrictions for WordPress <= 2.2.8 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureEPSS 0.4%CVE-2024-35729MEDIUMWordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-67939MEDIUMWordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-30851MEDIUMWordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-5860MEDIUMTickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket DeletionEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-15761MEDIUMTickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' ParameterEPSS 0.3%CVE-2026-13754MEDIUMTickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' ParameterEPSS 0.2%CVE-2026-15448MEDIUMTickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' ParameterEPSS 0.2%CVE-2025-12356MEDIUMTickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status UpdateEPSS 0.2%CVE-2026-13755MEDIUMTickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode AttributeEPSS 0.2%CVE-2025-69355MEDIUMWordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-58611MEDIUMWordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%