Liquid Web / Stellarwp Event Tickets vulnerabilities

7 vulnerabilities

Known vulnerabilities in Liquid Web / Stellarwp Event Tickets, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2026-110902liquid web / stellarwpevent tickets
EPSS score
0.22%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
5.3CVE-2026-105893liquid web / stellarwpevent tickets+1
EPSS score
0.26%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.
5.4CVE-2026-105888liquid web / stellarwpevent tickets+1
EPSS score
0.18%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.
4.3CVE-2026-105891liquid web / stellarwpevent tickets+1
EPSS score
0.20%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.
6.5CVE-2026-42662liquid web / stellarwpevent tickets+1
EPSS score
0.36%
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
4.3CVE-2026-104675liquid web / stellarwpevent tickets+1
EPSS score
0.17%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.
8.5CVE-2026-97287liquid web / stellarwpevent tickets+1
EPSS score
0.26%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.