Skip to content
OpenAdvisories

Vendor

Joe Dolson

7 known vulnerabilities.

Products

My Tickets 5 Able Player 1 My Calendar 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32492

    WordPress My Tickets plugin <= 2.1.1 - Bypass Vulnerability vulnerability

    Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows Identity Spoofing.This issue affects My Tickets: from n/a through <= 2.1.1.

    Joe Dolson My Tickets
  • Medium 4.3
    CVE-2025-67592

    WordPress My Calendar plugin <= 3.6.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Calendar: from n/a through <= 3.6.16.

    Joe Dolson My Calendar
  • Medium 4.3
    CVE-2025-64257

    WordPress My Tickets plugin <= 2.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through <= 2.1.0.

    Joe Dolson My Tickets
  • Medium 6.5
    CVE-2025-58988

    WordPress My Tickets Plugin <= 2.0.22 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through <= 2.0.22.

    Joe Dolson My Tickets
  • Medium 6.5
    CVE-2025-46475

    WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through <= 1.2.1.

    Joe Dolson Able Player