GetYourGuide Ticketing
GetYourGuide Ticketing has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for GetYourGuide Ticketing has a vendor fix available, so running the current release closes it.
All of these findings were reported by Mariam Tariq. GetYourGuide Ticketing is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2022-3609GetYourGuide Ticketing <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
GetYourGuide Ticketing
Author
Marcello Romanelli
GetYourGuide Ticketing offers an engaging checkout widget for your website, as well as a touchless ticketing solution for an improved end-to-end experience. If you’re interested in activating our solution you can get in touch with us here. Watch a one minute demo Online Checkout Benefit from best-in-class online checkout with high conversions, multiple payment and language options, and more with constant improvements and updates. The Buy Button Natively integrated into your website, the buy button is all you need to start selling tickets online — you can also customize the look and feel to suit your platform. Touchless Ticketing Use a low infrastructure POS solution with QR-code and online payment options, enabling customers on-site to self-book on the move and with more flexibility. How to use the link builder Go to the Link Builder sub-menu under GYG Ticketing menu. If already configured in the Settings sub-menu, Partner Affiliate ID and your webiste URL are already pre-filled Copy the GetYourGuide Activity Links you intend to show in your website Select a language Click Generate Links Output The first section called “Call to action link” will provide links that you need to use to update your “book” buttons links. In its first sub-section called “individual” will provide URLs that will show individual activities. The second sub-section called “combined” will provide one URL that will show all the activities together. The second section called deeplink will allow you to see links that will send users to your website with the Booking Engine already visible (deeplinking). In its first sub-section called “individual” will provide URLs that will show individual activities. The second sub-section called “combined” will provide one URL that will show all the activities together.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C