CVE-2026-13754 | Tickera Plugin up to 3.6.0.0 on WordPress Query sql injection

July 16, 2026 Yanac

A vulnerability has been found in Tickera Plugin up to 3.6.0.0 on WordPress and classified as critical. This impacts an unknown function of the component Query Handler. The manipulation of the argument s leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-13754. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More