Live › vulnerability › CVE-2026-110902
Go to dashboardThe Event Tickets plugin by Liquid Web / StellarWP has an authorization bypass that relies on a user-controlled key, affecting versions through 5.30.1. The sources do not say exactly what data or actions an attacker can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Event Tickets plugin at version or older are in scope according to the advisory. The sources do not say which configurations or roles make a site exposed, so unknown.
5.30.1No product ranges from the sources yet.
wp plugin get event-tickets --field=version5.30.1Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-110902")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.