Event Tickets and Registration, CVE-2026-14822

CVE, Research URL: CVE-2026-14822
Home page URL: Security reports for Event Tickets and Registration
Application: Event Tickets and Registration
Published on: Aug 01, 2026
Research Description: The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.
Affected versions: max 5.29.0.1.
Status: vulnerable