CVE-2026-122087
Event Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST API
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Event Tickets and Registration WordPress plugin before 5.30.3.1 does not restrict attendee data to events the requester is allowed to view, allowing unauthenticated users to retrieve the attendees of private and other non-public events.
| Vendor | unknown |
| Product | event tickets and registration |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown event tickets and registration
Be the first to know when new unknown vulnerabilities affecting unknown event tickets and registration are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Event Tickets and Registration
0 < 5.30.3.1
References
Credits
Aaron - WellKnown WPScan