CVE-2026-122085
Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their choosing, invalidating the legitimate ticket and causing the victim's ticket PDF, which contains attendee personal data, to be sent to the attacker.
| Vendor | unknown |
| Product | event tickets manager for woocommerce |
| Published | Nov 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown event tickets manager for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown event tickets manager for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Event Tickets Manager for WooCommerce
0 < 1.6.0
References
Credits
Sunil Tripathy WPScan