CPE

Cpe:2.3:a:the_events_calendar:event_tickets_and_registration:::*:::wordpress::

1 brief RSS

Unauthenticated Stripe Credential Overwrite in WordPress Event Tickets Plugin

The Event Tickets and Registration plugin for WordPress (v5.27.4 and earlier) contains an authorization flaw in the Stripe OAuth return endpoint, allowing unauthenticated attackers to hijack site payment processing.

Event Tickets and Registration web-application wordpress financial-fraud cve-2026-3174

1t 1c 2d ago

Cpe:2.3:a:the_events_calendar:event_tickets_and_registration:*:*:*:*:*:wordpress:*:*

Unauthenticated Stripe Credential Overwrite in WordPress Event Tickets Plugin

Cpe:2.3:a:the_events_calendar:event_tickets_and_registration:::*:::wordpress::