THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-14823 — The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of ev

[NVD] CVE-2026-14823 — The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of ev

mednvdPublished 2026-08-01

CVE-2026-14823 CVSS: None Published: 2026-08-01T07:16:30.730

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attendee seat assignments of events they do not own.

Indicators of compromise

CVE-2026-14823cve
5.29.0.1ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14823