Medium · 5.3 CVE-2025-27299 EUVD-2025-11628GHSA-87x6-4q8j-cg2m

WordPress MyTicket Events plugin <= 1.2.4 - Non-Arbitrary File Read vulnerability

Published Apr 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Asia Product: MyTicket Events

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Asia MyTicket Events myticket-events allows Path Traversal.This issue affects MyTicket Events: from n/a through <= 1.2.4.

Affected products

Vendor	Product	Affected	Fixed
WP Asia	MyTicket Events	≤ 1.2.4	—

References

https://patchstack.com/database/Wordpress/Plugin/myticket-events/vulnerability/wordpress-myticket-events-plugin-1-2-4-non-arbitrary-file-read-vulnerability?_s_id=cve vdb-entry