https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 12:56:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-123129 <p>The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free.</p> <p>This is due to an incomplete fix of CVE-2026-34898.</p> <p>The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free.</p> <p>This is due to an incomplete fix of CVE-2026-34898.</p> https://db.gcve.eu/vuln/fkie_cve-2026-123129 https://db.gcve.eu/vuln/ghsa-gqcc-52m4-8mqh <p>The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free.</p> <p>This is due to an incomplete fix of CVE-2026-34898.</p> <p>The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the submitted price site-wide, where it is applied to the next event ticket added to any cart, allowing unauthenticated visitors to buy event tickets at an arbitrary price, including for free.</p> <p>This is due to an incomplete fix of CVE-2026-34898.</p> https://db.gcve.eu/vuln/ghsa-gqcc-52m4-8mqh