easy-paypal-events-tickets vulnerabilities

2 known vulnerabilities in easy-paypal-events-tickets from Scott Paterson. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  easy-paypal-events-tickets: Authorization Bypass Through User-Controlled Key

  CVE-2026-41471May 4, 2026Scott Paterson

  The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticated attackers to enumerate and retrieve all customer order records. Attackers can

• 7.5 High severity

  easy-paypal-events-tickets: Use of Hard-coded Credentials

  CVE-2026-32834May 4, 2026Scott Paterson

  Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying 'test' as