CVE-2026-121858
📛 CVE Title
Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search
Description
The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- WPScan
- CVSS severity
- —
- CVSS score
- —
- CVSS vector
- —
- Effective score
- no score available from CNA, NVD, or AI yet
- CWE(s)
-
CWE-89 SQL Injection - Reserved
- 2026-11-04
- Published
- 2026-11-07 06:00 UTC
- Last updated
- 2026-11-07 18:16 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121858.json
AI-forensic CVSS estimate
Used only when a CVE has no official CVSS from its CNA or NVD. An LLM estimates the v3.1 base score from the description; a HIGH/CRITICAL estimate promotes the CVE to a Threat.
No AI estimate yet — it runs automatically once NVD has been checked, or click the button above.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-118948
EUVD enrichment is queued; refresh the page in a few seconds.
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Unknown | Event Tickets with Ticket Scanner |
0 (affected)
|
— |
Vendor references (1)
References embedded in the original CVE record by the assigning CNA.
- https://wpscan.com/vulnerability/8472ed42-2e1a-4efb-97b8-f01639772580/ exploitvdb-entrytechnical-description
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
Remediations (10)
-
web:blog.margrop.net
The security community recently disclosed the *sshole vulnerability ( CVE - 2026 -123158), a bizarre OpenSSH authentication bypass affecting musl libc systems. Does it really compromise every Alpine and …
2026-11-08 11:35 UTC -
web:cybersecuritynews.com
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 26-04, titled "Prioritizing Security Updates Based on Risk," compelling all Federal Civilian Executive Branch (FCEB) agencies to remediate the most dangerous known exploited vulnerabilities within just three calendar days.
2026-11-08 11:35 UTC -
web:cyberupdates365.com
Track critical CVE vulnerabilities 2026 with verified enterprise patch guides. Fix zero-days across VMware, WordPress, Windows, and cloud infrastructure.
2026-11-08 11:35 UTC -
web:cycode.com
Learn about sshole ( CVE - 2026 -123158), an OpenSSH authentication bypass vulnerability affecting Alpine Linux, key exposure criteria, affected public images, and fix guidance.
2026-11-08 11:35 UTC -
web:devops-daily.com
Read-only check for CVE - 2026 -123158: is your Alpine sshd affected by the password authentication bypass, fixed, or still running the old daemon? Tested on Alpine 3.21 to 3.24 and edge.
2026-11-08 11:35 UTC -
web:safe.security
By SAFE Threat Research Team Overview An account with no valid password should never accept password authentication. A newly disclosed OpenSSH vulnerability breaks that fundamental security assumption, potentially allowing attackers to gain unauthorized access to Linux systems and, in certain configurations, achieve full root compromise. Disclosed on November 5, 2026 , SSHole ( CVE - 2026 -123158 ...
2026-11-08 11:35 UTC -
web:support.servicenow.com
What you need to know: On September 24, 2026 , ServiceNow issued CVE - 2026 -86857, CVE - 2026 -86858, CVE - 2026 -13016, CVE - 2026 -86859, and CVE - 2026 -86860. Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security ...
2026-11-08 11:35 UTC -
web:www.helpnetsecurity.com
Exploitation of sshole ( CVE - 2026 -123158), an OpenSSH bug that opens passwordless Alpine Linux accounts, began within nine hours of disclosure.
2026-11-08 11:35 UTC -
web:www.ionix.io
TL;DR What is happening CVE - 2026 -123158 is a password authentication bypass in sshd on Linux systems where sshd is linked against musl libc and runs without PAM. The CVE record rates it CVSS 3.1 8.1 (High); NVD analysis is pending. OpenSSH fixed it in Portable OpenSSH 10.6p2 on November 5, 2026 . It was reported by Özgün...
2026-11-08 11:35 UTC -
web:www.wiz.io
Understand the critical aspects of CVE - 2026 -123158 with a detailed vulnerability assessment, exploitation potential, affected technologies, and remediation guidance.
2026-11-08 11:35 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-121858.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-121858",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-07T18:01:05.165891Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T18:16:14.642Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Event Tickets with Ticket Scanner",
"vendor": "Unknown",
"versions": [
{
"lessThan": "3.2.9",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Mokksh Parekh"
},
{
"lang": "en",
"type": "coordinator",
"value": "WPScan"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-89 SQL Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T06:00:29.004Z",
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan"
},
"references": [
{
"tags": [
"exploit",
"vdb-entry",
"technical-description"
],
"url": "https://wpscan.com/vulnerability/8472ed42-2e1a-4efb-97b8-f01639772580/"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search",
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"cveMetadata": {
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"cveId": "CVE-2026-121858",
"datePublished": "2026-11-07T06:00:29.004Z",
"dateReserved": "2026-11-04T09:23:13.992Z",
"dateUpdated": "2026-11-07T18:16:14.642Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}