What’s Vulnerable › Products

stellarwp Event Tickets and Registration vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your stellarwp Event Tickets and Registration version is affected

Latest stellarwp Event Tickets and Registration vulnerabilities

• CVE-2026-97634 — Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' Parameter (CVSS 6.5)
• CVE-2026-3174 — Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update (CVSS 7.5)
• CVE-2025-11517 — Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass (CVSS 7.5)
• CVE-2024-13457 — Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure (CVSS 5.3)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-2261 — Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure (CVSS 4.3)
• CVE-2024-1319 — Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure (CVSS 4.3)
• CVE-2024-1316 — Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access (CVSS 6.5)
• CVE-2024-1053 — Event Tickets and Registration <= 5.8.1 - Missing Authorization (CVSS 4.3)
• CVE-2019-16120 — (CVSS 8.8)