Event Tickets and Registration

Vulnerabilities 18Slug event-ticketsLatest version 5.27.6.1WordPress.org →

Minimum safe version

5.27.6.1

Update to 5.27.6.1 or later to address 18 fixable vulnerabilities

Latest available5.27.6.1 ✓

N/A

2026-05-02< 5.27.6.1

Event Tickets and Registration <= 5.27.5 - Missing Authorization

Wordfence CVE

Medium 5.4

2025-10-22< 5.26.4

CVE-2025-62027

CVE Wordfence

High 7.5

2025-10-18< 5.26.6

CVE-2025-11517

CVE EUVD Wordfence

High 7.1

2025-04-01< 5.20.1

CVE-2025-30794

CVE EUVD Wordfence

Medium 5.3

2025-02-21< 5.19.1.2

Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion

EUVD Wordfence CVE

Medium 5.3

2025-01-30< 5.18.1.1

CVE-2024-13457

CVE Patchstack EUVD Wordfence

Medium 6.3

2024-10-16< 5.3.0.1

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE

Medium 4.3

2025-01-02< 5.11.0.5

CVE-2024-38762

CVE Patchstack Wordfence

Medium 4.3

2024-04-09< 5.8.3

CVE-2024-2261

CVE Wordfence Patchstack WPScan

Medium 6.5

2024-03-04< 5.8.1

CVE-2024-1316

CVE Wordfence Patchstack WPScan

Medium 4.3

2024-02-22< 5.8.2

CVE-2024-1053

CVE Wordfence Patchstack WPScan

N/A

2023-07-19< 5.6.0

WordPress Event Tickets Plugin <= 5.5.11.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

N/A

2022-03-04< 5.3.0.1

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence

N/A

2019-09-03< 4.10.7.2

WordPress Event Tickets plugin <= 4.10.7.1 - CSV Injection vulnerability

Patchstack

N/A

2022-02-28< 5.3.0.1

WordPress Event Tickets plugin < 5.3.0.1 - Sensitive Information Disclosure vulnerability

Patchstack

N/A

2022-02-28< 5.3.0.1

WordPress Event Tickets plugin < 5.3.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack

High 8.8

2019-09-08< 4.10.7.2

CVE-2019-16120

CVE Wordfence WPScan

Medium 6.1

2022-01-24< 5.3.0.1

CVE-2021-25028

CVE Patchstack Wordfence WPScan