Medium · 5.4 CVE-2023-23726 EUVD-2023-27812GHSA-rv3p-vjhh-pg58

WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.1.0 - CSRF Leading To Post Status Change Vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affects Tickera: from n/a through 3.5.1.0.

Affected products

Vendor	Product	Affected	Fixed
Tickera.com	Tickera	≤ 3.5.1.0	—

References

https://patchstack.com/database/wordpress/plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-wordpress-event-ticketing-plugin-3-5-1-0-csrf-leading-to-post-status-change-vulnerability?_s_id=cve vdb-entry