CVE-2026-105893
Received Received - Intake

Authorization Bypass in Event Tickets Plugin

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Patchstack

Description
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-105893
EUVD
EUVD-2026-94954

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Liquid Web / StellarWP Event Tickets 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Authorization Bypass Through User-Controlled Key issue in the Liquid Web / StellarWP Event Tickets plugin. It allows attackers to manipulate user-controlled variables to bypass authorization checks. The affected versions are from n/a through 5.30.0.1.

Detection Guidance

This vulnerability is an authorization bypass through user-controlled keys in Event Tickets versions up to 5.30.0.1. Detection requires checking installed versions of the plugin and reviewing access logs for unusual user-controlled key manipulations. No specific commands are provided in the available context.

Impact Analysis

An attacker could exploit this to perform unauthorized actions by manipulating variables that should be restricted. This could lead to unintended data access or modifications, though it does not directly expose sensitive data or cause system crashes.

Compliance Impact

This vulnerability may impact compliance by allowing unauthorized access or modifications to data, which could violate principles of data integrity and access control required by GDPR and HIPAA. Organizations must address it to maintain regulatory compliance.

Mitigation Strategies

Update Event Tickets to the latest version beyond 5.30.0.1 to address the authorization bypass issue. Monitor official StellarWP or Liquid Web advisories for patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105893. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart