- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/23/2026, Event Tickets and Registration recorded 2 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Event Tickets and Registration and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97634Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' ParameterCVE-2026-3174Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials UpdateCVE-2025-11517Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment BypassCVE-2025-1402Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket DeletionCVE-2024-13457Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure8 Results | Page 1 of 1