Liquid Web / Stellarwp Event Tickets vulnerabilities
7 vulnerabilities
Known vulnerabilities in Liquid Web / Stellarwp Event Tickets, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-110902liquid web / stellarwpevent tickets
EPSS score0.22%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.CVE-2026-105893liquid web / stellarwpevent tickets+1EPSS score0.26%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-105888liquid web / stellarwpevent tickets+1EPSS score0.18%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-105891liquid web / stellarwpevent tickets+1EPSS score0.20%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-42662liquid web / stellarwpevent tickets+1EPSS score0.36%
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.CVE-2026-104675liquid web / stellarwpevent tickets+1EPSS score0.17%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.CVE-2026-97287liquid web / stellarwpevent tickets+1EPSS score0.26%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.
This issue affects Event Tickets: from n/a through 5.29.5.