Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-35729 EUVD-2024-35487GHSA-4pg5-hx4c-34cx

WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability

Published Jun 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.2.6.

Affected products

VendorProductAffectedFixed
Tickera Tickera ≤ 3.5.2.6 —

References