Question 1

What is CVE-2026-14822 — CVE-2026-14822?

Accepted Answer

The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.

Question 2

What is the authoritative source for CVE-2026-14822?

Accepted Answer

CVE-2026-14822 (CVE-2026-14822) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-14822CVE-2026-14822

Description

Scoring