CVE-2025-62027
WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through <= 5.26.3.
| CWE | CWE-862 |
| Vendor | stellarwp |
| Product | event tickets |
| Published | Oct 22, 2025 |
| Last Updated | Apr 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for stellarwp event tickets
Be the first to know when new medium vulnerabilities affecting stellarwp event tickets are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
StellarWP / Event Tickets
0 ≤ 5.26.3
References
Credits
n0_arafat_n0 | Patchstack Bug Bounty Program