Missing Authorization Vulnerability in Event Tickets by Liquid Web
CVE-2026-62055

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Event Tickets
Vendor
CVE Published:
30 October 2026

What is CVE-2026-62055?

A missing authorization vulnerability exists in the Event Tickets plugin from Liquid Web, affecting versions up to 5.30.2. This vulnerability allows unauthorized access to features, which may lead to exploitation through incorrectly configured access control security levels. Site administrators using this plugin should review their configurations and apply necessary updates to mitigate potential security risks.

Affected Version(s)

Event Tickets 0 <= 5.30.2

References

https://patchstack.com/database/wordpress/plugin/event-ti...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Elieve | Patchstack Bug Bounty Program
.