Passeum Ticketing

Passeum Ticketing has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Passeum Ticketing has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by KEVIN LEE (crattack). The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Passeum Ticketing vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2026-7421

Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting

Read the full analysis

Vulnerability Records

1 records


2026-06-02 10:57	Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting Passeum Ticketing <= 1.0	`CVE-2026-7421`	4.4 Medium	KEVIN LEE (crattack)	No

Showing 1–1 of 1 reports

Latestv1.0.1

Passeum Ticketing

Author

Passeum Ticketing

0.0(0)

0/100

Last Updated

2026-05-29 (3mo ago)

Active Installs

Downloads

333

Requires WP

6.6+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2026-02-25 (6mo ago)

Embedding the ticket purchase widget into your own WordPress website. Available shortcodes: Ticket purchase widget: To display the ticket purchase widget, insert the following code into your WordPress page: [passeum_ticketing_tickets event="EVENT_ID"] You can find the EVENT_ID in the events section under the Widget menu, in the “Data for WordPress plugin” section. Additional parameters: * payment_logo="1": Display payment provider logos (0/1) * language_selector="1": Display language selector (0/1) * default_language="hu": Default language (hu/en) * coupon="1": Force display of coupon code field (0/1). If you want to set the display per event from My Shop, this parameter should be omitted. * header="hide": Hide widget header. * event_title="hide": Hide event title. * event_location="hide": Hide event location. * event_date="hide": Hide event date. Example: [passeum_ticketing_tickets event="EVENT_ID" payment_logo="1" language_selector="1" default_language="hu"] Displaying purchase results: To display purchase results, you can use the following code: [passeum_ticketing_result] Additional parameters: * default_language="hu": Default language (hu/en) Example: [passeum_ticketing_result default_language="hu"] Displaying events list: To list events that are currently on sale: [passeum_ticketing_events] Additional parameters: * default_language="hu": Default language (hu/en) * payment_logo="1": Display payment provider logos (0/1) * language_selector="1": Display language selector (0/1) * coupon="1": Force display of coupon code field (0/1). If you want to set the display per event from My Shop, this parameter should be omitted. Example: [passeum_ticketing_events payment_logo="0"]

View on WordPress.org