EUVD lists missing authorization flaw in StellarWP Event Tickets through 5.30.2
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- StellarWP
- Product
- Event Tickets
- First seen
Summary
The EUVD database entry EUVD-2026-114274, updated 2026-10-30, lists a Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets from n/a through 5.30.2. It carries a CVSS v3.1 score of 4.3/10, and the item does not report confirmed exploitation.
If you use StellarWP
Check whether Event Tickets is installed and which version is running
Update Event Tickets to a version later than 5.30.2 once available
Review access control settings for ticket and attendee data
Review the EUVD-2026-114274 entry for the official fixed version
Check whether BookIt is installed and which version is running
Update BookIt to a version later than 2.6.0.6 once available
What the sources say 2
· Mastodon: “Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.” Source
· Mastodon: “Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.” Source