Skip to content
OpenAdvisories

Vendor

emarket-design

28 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-9848 Public exploit Scanner template

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and including, 6.0.4 The plugin hooks WordPress's `posts_request` filter with `wp_ticket_com_posts_request()`, which calls `emd…