Tickera – Sell Tickets & Manage Events
tickera-event-ticketing-system · plugin
Known security vulnerabilities for Tickera – Sell Tickets & Manage Events. Find out in seconds which version runs on your site with WP Lens.
15 known vulnerabilities
1 critical · 1 with public exploit code · latest Aug 31, 2026
Vulnerabilities
- Critical 9.8
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
- High 8.8
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability
- High 7.3
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
- Medium 6.5
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter
- Medium 6.5
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter
- Medium 6.5
Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter
- Medium 6.5
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
- Medium 6.4
Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute
- Medium 5.4
WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.1.0 - CSRF Leading To Post Status Change Vulnerability
- Medium 5.3
Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure
- Medium 4.3
Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update
- Medium 4.3
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
- Medium 4.3
WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability
- Medium 4.3
WordPress Tickera plugin <= 3.5.5.2 - Broken Access Control vulnerability
- Medium 4.3
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion