CVE-2025-1402

Summary

CVE-2025-1402 is a vulnerability affecting the Event Tickets and Registration plugin for WordPress. This issue allows authenticated attackers, with Contributor-level access and above, to delete arbitrary Attendee tickets without proper capability checks on the 'ajax_ticket_delete' function. The vulnerability exists in all versions up to, and including, 5.19.1.1, potentially leading to unintended data loss for event organizers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.