CVE-2025-12356 | Tickera Plugin up to 3.5.6.4 on WordPress AJAX Endpoint wp_ajax_change_ticket_status authorization

February 17, 2026 Yanac

A vulnerability labeled as problematic has been found in Tickera Plugin up to 3.5.6.4 on WordPress. The impacted element is the function wp_ajax_change_ticket_status of the component AJAX Endpoint. Executing a manipulation can lead to missing authorization.

This vulnerability is tracked as CVE-2025-12356. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More