CVE-2026-122087
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Nov 11, 2026
Vendor
unknown
Description
The Event Tickets and Registration WordPress plugin before 5.30.3.1 does not restrict attendee data to events the requester is allowed to view, allowing unauthenticated users to retrieve the attendees of private and other non-public events.