Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:tickera:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductTickera (35d1deff-7fbe-57c0-91b8-be131e31f200)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88998 vulnerable 2026-11-03 10:17:49.908630 Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN
MEDIUM (5.3)
The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount, allowing unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without paying.
Published: 2026-10-14T10:27:23.722Z
Updated: 2026-10-14T13:33:57.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7252 vulnerable 2026-06-08 06:21:57.418374 Tickera < 3.5.2.5 - Ticket leakage through IDOR
The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.
Published: 2024-04-22T05:00:01.365Z
Updated: 2024-11-22T14:41:14.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4549 vulnerable 2026-06-08 05:51:59.735133 Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Published: 2023-01-16T15:37:59.475Z
Updated: 2025-04-04T17:59:33.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.