CVE-2025-1402 | theeventscalendar Event Tickets and Registration Plugin up to 5.19.1.1 on WordPress ajax_ticket_delete authorization

A vulnerability, which was classified as problematic, has been found in theeventscalendar Event Tickets and Registration Plugin up to 5.19.1.1 on WordPress. Affected by this issue is the function ajax_ticket_delete. The manipulation leads to missing authorization.

This vulnerability is handled as CVE-2025-1402. The attack may be launched remotely. There is no exploit available.