My Tickets – Accessible Event Ticketing

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   My Tickets – Accessible Event Ticketing

Information

Software Type Plugin
Software Slug my-tickets (view on wordpress.org)
Software Status Active
Software Author joedolson
Software Website www.joedolson.com
Software Downloads 149,296
Software Active Installs 600
Software Record Last Updated August 17, 2026

9 Vulnerabilities

Submit a Vulnerability
My Tickets – Accessible Event Ticketing <= 2.1.1 - Missing Authorization
5.3
CVE-2026-32492
Mar 20, 2026
Researcher: Tarcísio Luchesi(Poystick)
My Tickets – Accessible Event Ticketing <= 2.1.0 - Unauthenticated Information Exposure
5.3
CVE-2026-27406
Feb 23, 2026
Researcher: daroo
My Tickets <= 2.1.0 - Missing Authorization
4.3
CVE-2025-64257
Dec 6, 2025
Researcher: daroo
My Tickets <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58988
Sep 9, 2025
Researcher: Muhammad Yudha - DJ
My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2025-3761
Apr 23, 2025
Researcher: Le Ngoc Anh
My Tickets <= 2.0.9 - Missing Authorization
5.3
CVE-2025-22717
Jan 15, 2025
Researcher: Kévin Mosbahi (Mika)
My Tickets <= 1.9.11 - Authorization Bypass
5.3
CVE-2023-23988
Jan 20, 2023
Researcher: yuyudhn
My Tickets <= 1.9.10 - Cross-Site Request Forgery
6.5
CVE-2022-47440
Jan 4, 2023
Researcher: rezaduty
My Tickets <= 1.8.30 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2021-24796
Oct 18, 2021
Researcher: Abhiyan Chhetri
Title Status CVE ID CVSS Researchers Date
My Tickets – Accessible Event Ticketing <= 2.1.1 - Missing Authorization Patched CVE-2026-32492 5.3 Tarcísio Luchesi(Poystick) March 20, 2026
My Tickets – Accessible Event Ticketing <= 2.1.0 - Unauthenticated Information Exposure Patched CVE-2026-27406 5.3 daroo February 23, 2026
My Tickets <= 2.1.0 - Missing Authorization Patched CVE-2025-64257 4.3 daroo December 6, 2025
My Tickets <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-58988 6.4 Muhammad Yudha - DJ September 9, 2025
My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation Patched CVE-2025-3761 8.8 Le Ngoc Anh April 23, 2025
My Tickets <= 2.0.9 - Missing Authorization Patched CVE-2025-22717 5.3 Kévin Mosbahi (Mika) January 15, 2025
My Tickets <= 1.9.11 - Authorization Bypass Patched CVE-2023-23988 5.3 yuyudhn January 20, 2023
My Tickets <= 1.9.10 - Cross-Site Request Forgery Patched CVE-2022-47440 6.5 rezaduty January 4, 2023
My Tickets <= 1.8.30 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2021-24796 6.1 Abhiyan Chhetri October 18, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation