Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-105889 EUVD-2026-96381GHSA-wpf6-44wg-8vx5

WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.

Affected products

VendorProductAffectedFixed
Tickera Tickera ≤ 3.6.0.6 —

References