Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:events_tickets_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductEvents Tickets Plus (25702fcb-5130-50f6-bed0-22a7808678b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1319 vulnerable 2026-06-08 06:25:39.810890 Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure
The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).
Published: 2024-03-04T21:00:09.049Z
Updated: 2025-03-27T16:48:48.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1316 vulnerable 2026-06-08 06:25:39.806835 Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
Published: 2024-03-04T21:00:09.876Z
Updated: 2024-08-28T15:21:35.718Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.