CVE-2023-7252

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
UnknownTickera < 3.5.2.5
tickeratickera< 3.5.2.5

References

Timeline

Published
Apr 22, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-72536.1The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, whichCVE-2023-72564.4In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and poCVE-2023-72586.5A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making itCVE-2023-72592.4** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown CVE-2023-72607.5Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitraCVE-2023-72617.8Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalationCVE-2023-72637.3Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorCVE-2023-72649.8The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, anCVE-2023-72656.2Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availabilitCVE-2023-72668.1Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or informatiCVE-2023-72686.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticCVE-2023-72697.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping
CVE-2023-7252: Medium severity, CVSS 5.3 | Vulnix