CVE-2026-27406: WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability
Published Mar 5, 2026
·Updated
Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through <= 2.1.0.
Affected Software
2 affected components
Joe Dolson My Tickets<=2.1.0
wordpress/my-tickets<=2.1.0
Event History
Mar 5, 2026
CVE Published
via MITRE·05:53 AM
Data Sourced
via MITRE·05:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-27406?
CVE-2026-27406 has been classified as a moderate severity vulnerability due to the potential for sensitive data exposure.
2
How do I fix CVE-2026-27406?
The recommended fix for CVE-2026-27406 is to upgrade the My Tickets plugin to version 2.1.1 or later.
3
What type of data is exposed in CVE-2026-27406?
CVE-2026-27406 allows for the retrieval of embedded sensitive data inserted into sent data.
4
Which versions of My Tickets are affected by CVE-2026-27406?
CVE-2026-27406 affects My Tickets plugin versions from an unknown release up to and including version 2.1.0.
5
Who is the vendor for the My Tickets plugin related to CVE-2026-27406?
The vendor for the My Tickets plugin related to CVE-2026-27406 is Joe Dolson.