CVE-2026-42662
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Event Tickets versions up to 5.27.5 contain a vulnerability that allows unauthenticated bypass of security measures.
Risk Assessment
Organizations may be exposed to unauthorized access to ticket-related functions, potentially leading to abuse.
Recommendation
It is recommended to update to the latest version of Event Tickets to mitigate this vulnerability.
Other vulnerabilities in Event Tickets
See all- CVE-2026-110902Medium
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
- CVE-2026-105893Medium
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables. This issue affects Event Tickets: from n/a through 5.30.0.1.
- CVE-2026-62047Medium
The Event Tickets plugin (Liquid Web / StellarWP) through 5.30.2 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.
- CVE-2026-62055Medium
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.
- CVE-2026-105891Medium
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Tickets: from n/a through 5.30.0.1.
- CVE-2026-105888Medium
Missing authorization in Event Tickets (up to 5.30.0.1) allows exploiting incorrectly configured access control security levels.
- CVE-2026-104675Medium
Missing authorization in Event Tickets plugin up to version 5.30.0. Allows exploitation of incorrectly configured access control security levels.
- CVE-2026-97287High
The Event Tickets plugin (Liquid Web / StellarWP) is vulnerable to SQL Injection (Blind SQL Injection) due to improper neutralization of special elements in SQL commands. This issue affects Event Tickets from n/a through 5.29.5.
- CVE-2026-93526High
Unauthenticated Cross Site Scripting (XSS) in Event Tickets versions up to 5.29.4.
- CVE-2026-78263High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Event Tickets versions up to and including 5.29.2.1.
Original NVD description (English source)
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS