Event Tickets and Registration, CVE-2026-14823

CVE, Research URL: CVE-2026-14823
Home page URL: Security reports for Event Tickets and Registration
Application: Event Tickets and Registration
Published on: Aug 01, 2026
Research Description: The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.
Affected versions: max 5.29.0.1.
Status: vulnerable