CVE-2026-122061
Event Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST Endpoint
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Event Tickets and Registration WordPress plugin before 5.30.3.1 does not correctly check whether an event displays a public attendee list before returning one of its attendees over the REST API, allowing unauthenticated users to retrieve the names of attendees of events that do not show a public attendee list.
| Vendor | unknown |
| Product | event tickets and registration |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown event tickets and registration
Be the first to know when new unknown vulnerabilities affecting unknown event tickets and registration are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Event Tickets and Registration
0 < 5.30.3.1
References
Credits
Aaron - WellKnown WPScan