NetSight
low2.2

CVE-2026-14823

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with …

Impact

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.

Affected products

ProductAffected versions
Event Tickets And Registration WordPress Plugin
before 5.29.0.1

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References