Filtered by vendor Tri Subscriptions
Filtered by product Event Tickets Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16120 1 Tri 1 Event Tickets 2024-08-05 8.8 High
CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.
CVE-2021-25028 1 Tri 1 Event Tickets 2024-08-03 6.1 Medium
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue