Automattic Camptix Event Ticketing vulnerabilities

2 CVEs affecting Automattic Camptix Event Ticketing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-10763, published 2019-07-18.

More from Automattic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10762, published 2019-07-18. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.
• CVE-2016-10763, published 2019-07-18. Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days. The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.