GCVE - cpe:2.3:a:my_tickets_project:my_tickets:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:my_tickets_project:my_tickets:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	My Tickets Project (`257abd1a-5cae-51f0-9573-e0c8ed78bcd5`)
Product	My Tickets (`6775bbd7-3a2d-5c96-85b1-1d994b5a2ad6`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-47440`	vulnerable	2026-06-08 05:50:40.452615	WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (4.3) Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions. Published: 2023-03-13T09:14:32.359Z Updated: 2026-04-28T16:07:57.543Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/my-tickets/wordpress-my-tickets-plugin-1-9-10-cross-site-request-forgery-csrf?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24796`	vulnerable	2026-06-08 05:30:39.255072	My Tickets < 1.8.31 - Unauthenticated Stored Cross-Site Scripting The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins Published: 2021-11-17T10:15:40.000Z Updated: 2024-08-03T19:42:17.335Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/d973dc0f-3cb4-408d-a8b0-01abeb9ef951	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.