CVE-2024-12578: Tickera – Sell Tickets & Manage Events

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, email addresses, check-in/out timestamps and more.

Affected products

• Tickera Tickera – Sell Tickets & Manage Events: up to and including 3.5.4.8

Published 2024-12-14. Last modified 2026-06-17.