{"affected":[{"defaultStatus":"unaffected","product":"Event Tickets Manager for WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.6.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-122085","cwes":["CWE-639"],"description":"The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, which is available to unauthenticated users, allowing them to transfer other attendees' guest-checkout tickets to an email address of their choosing, invalidating the legitimate ticket and causing the victim's ticket PDF, which contains attendee personal data, to be sent to the attacker.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/470c82a9-cf42-49d8-9606-aaaa7c20679e/"}],"kev":null,"metrics":[],"modifiedAt":1794117627655,"publishedAt":1794117627655,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/470c82a9-cf42-49d8-9606-aaaa7c20679e/"}],"remediation":[],"revision":"b0aa1f816cc1b9716d45c2746f46aa3075d647637f1fee47ffcde02aa070d401","sources":[{"modifiedAt":1794117627655,"name":"CNA: WPScan","retrievedAt":1794118115825,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122085"}],"ssvc":null,"status":"published","title":"Event Tickets Manager for WooCommerce < 1.6.0 - Unauthenticated Ticket Transfer and Attendee PII Disclosure","updatedAt":1794118115825}