Joe Dolson vulnerabilities

Products

• My Tickets 5
• Able Player 1
• My Calendar 1

Latest Joe Dolson CVEs

Newest publication first

1. CVE-2026-32492 WordPress My Tickets plugin <= 2.1.1 - Bypass Vulnerability vulnerability

   Published 2026-03-25

   Medium·CVSS 5.3 EPSS 0.31%

   Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows Identity Spoofing.This issue affects My Tickets: from n/a through <= 2.1.1.

2. CVE-2026-27406 WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability

   Published 2026-03-05

   High·CVSS 7.5 EPSS 0.43%

   Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through <= 2.1.0.

3. CVE-2025-67592 WordPress My Calendar plugin <= 3.6.16 - Broken Access Control vulnerability

   Published 2025-12-09

   Medium·CVSS 4.3 EPSS 0.19%

   Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Calendar: from n/a through <= 3.6.16.

4. CVE-2025-64257 WordPress My Tickets plugin <= 2.1.0 - Broken Access Control vulnerability

   Published 2025-12-09

   Medium·CVSS 4.3 EPSS 0.25%

   Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through <= 2.1.0.

5. CVE-2025-58988 WordPress My Tickets Plugin <= 2.0.22 - Cross Site Scripting (XSS) Vulnerability

   Published 2025-09-09

   Medium·CVSS 6.5 EPSS 0.17%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through <= 2.0.22.

6. CVE-2025-46475 WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

   Published 2025-04-24

   Medium·CVSS 6.5 EPSS 0.27%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson Able Player ableplayer allows DOM-Based XSS.This issue affects Able Player: from n/a through <= 1.2.1.

7. CVE-2025-22717 WordPress My Tickets plugin <= 2.0.9 - Broken Access Control vulnerability

   Published 2025-01-21

   High·CVSS 7.5 EPSS 0.40%

   Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects My Tickets: from n/a through <= 2.0.9.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.