Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-10
Event Tickets Manager for WooCommerce - Security Vulnerability (CVE-2026-123129)
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free. This is due to an incomplete fix of CVE-2026-34898.
PLUGIN
Event Tickets Manager for WooCommerce
CVE-2026-123129
Risk Score
Threat Entry
Updated 2026-11-10
Event Tickets Manager for WooCommerce - Security Vulnerability (CVE-2026-122085)
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their choosing, invalidating the legitimate ticket and causing the victim's ticket PDF, which contains attendee personal data, to be sent to the attacker.
PLUGIN
Event Tickets Manager for WooCommerce
CVE-2026-122085
Risk Score
Threat Entry
Updated 2026-07-13
Event Tickets Manager For Woocommerce - Broken Access Control (CVE-2026-57400)
Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets Manager for WooCommerce: from n/a through
PLUGIN
Event Tickets Manager For Woocommerce
CVE-2026-57400
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets Manager for WooCommerce - Broken Access Control (CVE-2026-34898)
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce
PLUGIN
Event Tickets Manager for WooCommerce
CVE-2026-34898
Risk Score