← All advisories

Critical severity9.8NVD Advisory· Published Aug 31, 2026· Updated Sep 1, 2026

CVE-2026-82226

CVE-2026-82226

Description

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Tickerallm-fuzzy
Range: <=3.6.0.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-plugin-3-6-0-2-php-object-injection-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Wordfence Blog · Sep 3, 2026