Unrated severityNVD Advisory· Published Nov 7, 2026
CVE-2026-121858
CVE-2026-121858
Description
The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.2.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.