medium5.3
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, all…
Impact
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.
Affected products
| Product | Affected versions |
|---|---|
| Event Tickets And Registration WordPress Plugin | before 5.29.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.