Known vulnerabilities in the My Tickets plugin
8 security advisories have been published for the My Tickets plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- My Tickets - Authentication Bypass (CVE-2026-32492) MEDIUM
- My Tickets - Information Disclosure (CVE-2026-27406) HIGH
- My Tickets - Broken Access Control (CVE-2025-64257) MEDIUM
- My Tickets - Cross-Site Scripting (XSS) (CVE-2025-58988) MEDIUM
- My Tickets - Privilege Escalation (CVE-2025-3761) HIGH
- My Tickets - Broken Access Control (CVE-2025-22717) HIGH
- My Tickets - Cross-Site Request Forgery (CSRF) (CVE-2022-47440) MEDIUM
- My Tickets - Cross-Site Scripting (XSS) (CVE-2021-24796) MEDIUM