Skip to content
Threat Feed
Subscribe

Product

Event Tickets and Registration (<= 5.27.4)

1 brief RSS
medium advisory

Unauthenticated Stripe Credential Overwrite in WordPress Event Tickets Plugin

The Event Tickets and Registration plugin for WordPress (v5.27.4 and earlier) contains an authorization flaw in the Stripe OAuth return endpoint, allowing unauthenticated attackers to hijack site payment processing.

Event Tickets and Registration web-application wordpress financial-fraud cve-2026-3174
1t 1c