{
 "id": "WPSEC-2026-2140",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2140/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2140/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2140/index.md",
 "title": "Event Tickets and Registration <= 5.30.2 - Unauthenticated Payment Bypass via PayPal Standard Payment Data Tampering",
 "description": "The Event Tickets and Registration plugin for WordPress is vulnerable to insufficient verification of data authenticity in the legacy PayPal Standard payment confirmation in all versions up to, and including, 5.30.2. This is due to payments being fulfilled without checking the amount, currency or receiving merchant against what the checkout sent, and the PDT handler always issuing tickets as completed regardless of the payment status. This makes it possible for unauthenticated attackers to obtain tickets by tampering with the PayPal cart to underpay or pay another merchant, on sites using the legacy PayPal Standard gateway.",
 "plugin": {
  "slug": "event-tickets",
  "name": "Event Tickets and Registration",
  "full_name": "Event Tickets and Registration",
  "wordpress_org": "https://wordpress.org/plugins/event-tickets/",
  "advisories_url": "https://wpsec.com/vuln/plugin/event-tickets/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/event-tickets"
 },
 "type": "BYPASS",
 "cwe": [
  "CWE-345"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.30.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.30.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.30.3",
 "remediation": "Update to 5.30.3 or later.",
 "fix_released": "2026-10-29T19:43:04+00:00",
 "published": "2026-10-30T20:44:05+00:00",
 "updated": "2026-10-30T09:24:08.020346+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2140/",
  "https://plugins.svn.wordpress.org/event-tickets/tags/5.30.3/",
  "https://wordpress.org/plugins/event-tickets/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/event-tickets",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-30"
 }
}