CVE-2026-97634 | StellarWP Event Tickets and Registration Plugin up to 5.29.5 on WordPress orderby sql injection

October 2, 2026 Yanac

A vulnerability labeled as critical has been found in StellarWP Event Tickets and Registration Plugin up to 5.29.5 on WordPress. Affected by this issue is some unknown functionality. Executing a manipulation of the argument orderby can lead to sql injection.

This vulnerability is handled as CVE-2026-97634. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More