PULSE
ESEN
FEED
ransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturingransommetaencryptor reclama a Pekin Insurance · US · Financial Servicesransomn0n reclama a Staples, Inc. / SBD Inc. · US · Retail & E-Commerceransomn0n reclama a Lampenwelt GmbH · DE · Retail & E-Commerceransomn0n reclama a Infutor Data Solutions · US · Technologyransomn0n reclama a Higginbotham · US · Professional Servicesransomrhysida reclama a Treuhand & Immobilien Abt AG · CH · Financial Servicesransomwhitearmor reclama a maersk · DK · Transportationransomqilin reclama a Acondistec · DE · Manufacturingransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturingransommetaencryptor reclama a Pekin Insurance · US · Financial Servicesransomn0n reclama a Staples, Inc. / SBD Inc. · US · Retail & E-Commerceransomn0n reclama a Lampenwelt GmbH · DE · Retail & E-Commerceransomn0n reclama a Infutor Data Solutions · US · Technologyransomn0n reclama a Higginbotham · US · Professional Servicesransomrhysida reclama a Treuhand & Immobilien Abt AG · CH · Financial Servicesransomwhitearmor reclama a maersk · DK · Transportationransomqilin reclama a Acondistec · DE · Manufacturing
← Todos os CVEs
CVE Watch7 de nov. de 2026

CVE-2026-121857

The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returni

CVSS

—

Sem CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 7 de nov. de 2026 · Última mod.: 7 de nov. de 2026

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the Event Tickets with Ticket Scanner WordPress plugin before 3.1.14's admin area (down to Subscriber) to view other customers' ticket codes and names and to remove tickets from their orders.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.