Tickera – Sell Tickets & Manage Events

Software Type	Plugin
Software Slug	tickera-event-ticketing-system (view on wordpress.org)
Software Status	Active
Software Author	tickera
Software Website	tickera.com
Software Downloads	370,242
Software Active Installs	2,000
Software Record Last Updated	July 13, 2026

14 Vulnerabilities

Submit a Vulnerability

Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update

4.3

CVE-2025-12356

Feb 17, 2026

Researcher: Athiwat Tiprasaharn (Jitlada)

Tickera <= 3.5.6.2 - Missing Authorization

4.3

CVE-2025-67939

Jan 16, 2026

Researcher: daroo

Tickera <= 3.5.6.4 - Missing Authorization

4.3

CVE-2025-69355

Jan 9, 2026

Researcher: Nabil Irawan

Tickera <= 3.5.5.6 - Cross-Site Request Forgery

4.3

CVE-2025-58611

Sep 3, 2025

Researcher: Nguyen Xuan Chien

Tickera <= 3.5.5.2 - Missing Authorization

4.3

CVE-2025-30851

Mar 27, 2025

Researcher: Peter Thaleikis

Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure

5.3

CVE-2024-12578

Dec 13, 2024

Researchers: Aaron Schlitt, Paule

Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution

7.3

CVE-2024-10263

Nov 4, 2024

Researcher: Arkadiusz Hydzik

Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion

4.3

CVE-2024-5860

Jun 17, 2024

Researcher: Lucio Sá

Tickera <= 3.5.2.6 - Missing Authorization

4.3

CVE-2024-35729

Jun 6, 2024

Researcher: Manab Jyoti Dowarah

Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure

5.3

CVE-2023-7252

Apr 1, 2024

Researcher: Martin Thirup Christensen

Tickera <= 3.5.1.0 - Cross-Site Request Forgery to Ticket Post Status Change

4.3

CVE-2023-23726

Feb 14, 2023

Researcher: István Márton

Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes

4.3

CVE-2022-4549

Dec 23, 2022

Researcher: rezaduty

Freemius SDK <= 2.4.2 - Missing Authorization Checks

6.3

CVE-2022-4974

Mar 4, 2022

Researchers:

Tickera <= 3.4.8.2 - Unauthenticated Stored Cross-Site Scripting

7.2

CVE-2021-24797

Nov 23, 2021

Researcher: Ajit Bhatta

Title	Status	CVE ID	CVSS	Researchers	Date
Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update	Patched	CVE-2025-12356	4.3	Athiwat Tiprasaharn (Jitlada)	February 17, 2026
Tickera <= 3.5.6.2 - Missing Authorization	Patched	CVE-2025-67939	4.3	daroo	January 16, 2026
Tickera <= 3.5.6.4 - Missing Authorization	Patched	CVE-2025-69355	4.3	Nabil Irawan	January 9, 2026
Tickera <= 3.5.5.6 - Cross-Site Request Forgery	Patched	CVE-2025-58611	4.3	Nguyen Xuan Chien	September 3, 2025
Tickera <= 3.5.5.2 - Missing Authorization	Patched	CVE-2025-30851	4.3	Peter Thaleikis	March 27, 2025
Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure	Patched	CVE-2024-12578	5.3	Aaron Schlitt, Paule	December 13, 2024
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution	Patched	CVE-2024-10263	7.3	Arkadiusz Hydzik	November 4, 2024
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion	Patched	CVE-2024-5860	4.3	Lucio Sá	June 17, 2024
Tickera <= 3.5.2.6 - Missing Authorization	Patched	CVE-2024-35729	4.3	Manab Jyoti Dowarah	June 6, 2024
Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure	Patched	CVE-2023-7252	5.3	Martin Thirup Christensen	April 1, 2024
Tickera <= 3.5.1.0 - Cross-Site Request Forgery to Ticket Post Status Change	Patched	CVE-2023-23726	4.3	István Márton	February 14, 2023
Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes	Patched	CVE-2022-4549	4.3	rezaduty	December 23, 2022
Freemius SDK <= 2.4.2 - Missing Authorization Checks	Patched	CVE-2022-4974	6.3		March 4, 2022
Tickera <= 3.4.8.2 - Unauthenticated Stored Cross-Site Scripting	Patched	CVE-2021-24797	7.2	Ajit Bhatta	November 23, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation