Tickera vulnerabilities
We track 3 vulnerabilities in Tickera products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
Latest Tickera vulnerabilities
- 9.3 Critical severity
Tickera: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.
- 7.3 High severity
Tickera – Sell Tickets & Manage Events: Improper Control of Generation of Code
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This is due to the software allowing users to execute an action that does not properly validate a value b
- 8.8 High severity
Tickera: Missing Authorization
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.2.6.