CVE-2026-105891 Details
Description
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.
A missing authorization vulnerability has been identified in the Liquid Web / StellarWP Event Tickets plugin, specifically in versions through 5.30.0.1. This vulnerability allows for broken access control, enabling users to exploit incorrectly configured access control security levels and potentially access pages or perform actions they shouldn't be allowed to.
Users of the Event Tickets plugin should update to version 5.30.0.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 8, 2026CISA-ADP
Assessed Oct 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Liquid Web Event Tickets | <= 5.30.0.1 |
CPE
Remediation
| |
| StellarWP Event Tickets | <= 5.30.0.1 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 10, 2026 | CVE Modified | CISA-ADP |
| Oct 8, 2026 | New CVE Received | [email protected] |