Security Advisory

CVE-2026-14823

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-01 06:00:13

Last updated 2026-08-01 06:00:13

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.

← Browse all CVEs View on cve.org ↗