CVE-2025-22717: WordPress My Tickets plugin <= 2.0.9 - Broken Access Control vulnerability
Published Jan 21, 2025
·Updated
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects My Tickets: from n/a through <= 2.0.9.
Affected Software
1 affected component
Joe Dolson My Tickets<=2.0.9
Remediation
Information
Update the WordPress My Tickets wordpress plugin to the latest available version (at least 2.0.10).
Event History
Jan 21, 2025
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-22717?
The severity of CVE-2025-22717 is classified as a missing authorization vulnerability allowing unauthorized access.
2
How do I fix CVE-2025-22717?
To fix CVE-2025-22717, update the Joe Dolson My Tickets plugin to version 2.0.10 or later.
3
What versions of My Tickets are affected by CVE-2025-22717?
CVE-2025-22717 affects all versions of My Tickets from n/a through 2.0.9.
4
What is the nature of the vulnerability in CVE-2025-22717?
CVE-2025-22717 is a missing authorization vulnerability that allows access to functionality not properly constrained by Access Control Lists (ACLs).
5
Who is impacted by CVE-2025-22717?
Users of Joe Dolson My Tickets and WordPress My Tickets versions up to 2.0.9 are impacted by CVE-2025-22717.