Unrated severityNVD Advisory· Published Aug 1, 2026
Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation
CVE-2026-14822
Description
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <5.29.0.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ec32cf58-9fc0-4817-8492-92d80be74ef4/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.