Unknown Event Tickets And Registration vulnerabilities

3 CVEs affecting Unknown Event Tickets And Registration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-14823, published 2026-08-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-14822, published 2026-08-01. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change…
CVE-2026-14819, published 2026-07-28. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before outputting them in a ticket history log, allowing users with the Editor role and above…
CVE-2026-14823, published 2026-08-01. Low severity, CVSS 2.2. EPSS: 0.2% chance of exploitation in the next 30 days. The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to…