Tickera – Sell Tickets & Manage Events

Vulnerabilities 20Slug tickera-event-ticketing-systemLatest version 3.5.7.0WordPress.org →

Minimum safe version

3.5.6.5

Update to 3.5.6.5 or later to address 20 fixable vulnerabilities

Latest available3.5.7.0 ✓

Medium 4.3

2026-02-18< 3.5.6.5

CVE-2025-12356

CVE Wordfence

Medium 6.5

2026-01-22< 3.5.6.3

CVE-2025-67939

CVE Wordfence

Medium 4.3

2026-01-09< 3.5.6.5

Tickera <= 3.5.6.4 - Missing Authorization

Wordfence CVE

Medium 4.3

2025-09-03< 3.5.5.8

CVE-2025-58611

CVE Wordfence EUVD

Medium 4.3

2025-03-27< 3.5.5.3

CVE-2025-30851

CVE Patchstack Wordfence EUVD

Medium 5.3

2024-12-14< 3.5.4.9

CVE-2024-12578

CVE Wordfence

Medium 6.3

2024-10-16< 3.4.9.2

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE

High 7.3

2024-11-05< 3.5.4.6

CVE-2024-10263

CVE Patchstack Wordfence

Medium 4.3

2024-06-18< 3.5.2.9

CVE-2024-5860

CVE Wordfence Patchstack

Medium 5.3

2024-06-10< 3.5.2.7

CVE-2024-35729

CVE Patchstack Wordfence

Medium 5.3

2024-04-22< 3.5.2.5

CVE-2023-7252

CVE Patchstack Wordfence WPScan

N/A

< 3.4.6.9

Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure

WPScan

N/A

2023-07-18< 3.4.8.4

WordPress Tickera Plugin < 3.4.8.4 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE

Medium 5.4

2024-12-09< 3.5.1.1

CVE-2023-23726

CVE Patchstack Wordfence

Medium 4.3

2023-01-16< 3.5.1.0

CVE-2022-4549

CVE Patchstack Wordfence WPScan

N/A

2022-03-04< 3.4.9.2

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence

N/A

2020-04-11< 3.4.6.9

WordPress Tickera plugin <= 3.4.6.7 - Sensitive Data Exposure vulnerability

Patchstack

N/A

2022-02-28< 3.4.9.2

WordPress Tickera plugin < 3.4.9.2 - Sensitive Information Disclosure vulnerability

Patchstack

N/A

2022-02-28< 3.4.9.2

WordPress Tickera plugin < 3.4.9.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack

Medium 6.1

2021-12-27< 3.4.9.2

CVE-2021-24797

CVE Patchstack Wordfence WPScan