Live › vulnerability › CVE-2026-62047
The Event Tickets WordPress plugin from Liquid Web and StellarWP has a missing authorization check, so access control is not enforced as intended. The sources do not say what data or actions an attacker can reach through it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the Event Tickets plugin at version 5.30.2 or earlier are listed as affected. The sources do not say which roles or settings make a site exposed, so treat any site with the plugin as in scope until checked.
No product ranges from the sources yet.
event-tickets plugin is installed on a WordPress site and read its version in the plugin list.5.30.2; versions up to and including 5.30.2 are listed as affected.5.30.2 but do not name a fixed version).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-62047")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.