Skip to content
PluginCanary

Tickera - Sell Tickets & Manage Events

by Tickera · 2,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 14 Oct 2026, fixed in 3.6.0.4.

81/ 100 Canary Score
Sub-scores for Tickera - Sell Tickets & Manage Events
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 3.6.0.4. Update to version 3.6.0.4 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 3.6.0.7. Update to version 3.6.0.7 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 3.6.0.3. Update to version 3.6.0.3 or later.28 Aug 2026Evidence
  • InfoSEC-313 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
tickera24 Nov 2014 to 23 Oct 2026, 381 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
12 days ago
Releases, 24 months
35
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter for Tickera - Sell Tickets & Manage Events
Q1 20240
Q2 20240
Q3 202418
Q4 20247
Q1 20252
Q2 20254
Q3 20252
Q4 20255
Q1 20263
Q2 20267
Q3 20266
Q4 20263

Last release 23 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026Tickera – Sell Tickets & Manage Events < 3.6.0.4 - Unauthenticated Arbitrary Order Payment Confirmation5.3< 3.6.0.43.6.0.40
8 Oct 2026Tickera – Sell Tickets & Manage Events <= 3.6.0.6 - Unauthenticated SQL Injection7.5<= 3.6.0.63.6.0.70
28 Aug 2026Tickera – Sell Tickets & Manage Events <= 3.6.0.2 - Unauthenticated PHP Object Injection8.1<= 3.6.0.23.6.0.30
22 Jul 2026Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter6.5<= 3.6.0.13.6.0.20
22 Jul 2026Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter6.5<= 3.6.0.13.6.0.20
15 Jul 2026Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter6.5<= 3.6.0.03.6.0.10
15 Jul 2026Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute6.4<= 3.6.0.03.6.0.10
17 Feb 2026Tickera – WordPress Event Ticketing <= 3.5.6.4 - Missing Authorization to Authenticated (Subscriber+) Event/Post Status Update4.3<= 3.5.6.43.5.6.50
16 Jan 2026Tickera <= 3.5.6.2 - Missing Authorization4.3<= 3.5.6.23.5.6.30
9 Jan 2026Tickera <= 3.5.6.4 - Missing Authorization4.3<= 3.5.6.43.5.6.50
3 Sep 2025Tickera <= 3.5.5.6 - Cross-Site Request Forgery4.3<= 3.5.5.63.5.5.80
27 Mar 2025Tickera <= 3.5.5.2 - Missing Authorization4.3<= 3.5.5.23.5.5.30
13 Dec 2024Tickera – WordPress Event Ticketing <= 3.5.4.8 - Unauthenticated Customer Data Exposure5.3<= 3.5.4.83.5.4.90
4 Nov 2024Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution7.3<= 3.5.4.43.5.4.60
17 Jun 2024Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion4.3<= 3.5.2.83.5.2.9n/a
6 Jun 2024Tickera <= 3.5.2.6 - Missing Authorization4.3<= 3.5.2.63.5.2.7n/a
1 Apr 2024Tickera – WordPress Event Ticketing <= 3.5.2.4 - Insecure Direct Object Reference to Information Exposure5.3<= 3.5.2.43.5.2.5n/a
14 Feb 2023Tickera <= 3.5.1.0 - Cross-Site Request Forgery to Ticket Post Status Change4.3<= 3.5.1.03.5.1.1n/a
23 Dec 2022Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes4.3<= 3.4.9.93.5.1.0n/a
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 3.4.9.23.4.9.2n/a
23 Nov 2021Tickera <= 3.4.8.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.4.8.23.4.8.3n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.5 from 292 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star243
4 star11
3 star0
2 star6
1 star32

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Tickera - Sell Tickets & Manage Events
4 May 2026136
11 May 20261,731
18 May 2026545
25 May 2026337
1 Jun 20261,708
8 Jun 2026412
15 Jun 2026263
22 Jun 20261,496
29 Jun 2026368
6 Jul 2026460
13 Jul 20261,907
20 Jul 20261,918
27 Jul 2026491
3 Aug 2026515
10 Aug 2026282
17 Aug 2026233
24 Aug 20261,766
31 Aug 2026633
7 Sep 2026343
14 Sep 20261,852
21 Sep 20262,062
28 Sep 20261,792
5 Oct 20262,273
12 Oct 20262,008
19 Oct 20262,004
26 Oct 2026827
2 Nov 202672

Weekly downloads over the last 4 weeks are 17% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Events Shortcodes For The Events CalendarScore 92 · 10,000+Events Widgets For Elementor And The Events CalendarScore 91 · 10,000+Sugar Calendar - Events Calendar, Event Tickets, and Events Management PlatformScore 91 · 10,000+The Events Calendar Shortcode & BlockScore 91 · 10,000+Ticket Tailor - Event Ticketing & RegistrationScore 91 · 4,000+

Facts

Version3.6.0.9
AuthorTickera
Added24 Nov 2014
Last updated23 Oct 2026
Active installs2,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagstickets, sell tickets, ticket sales, Manage events, event registration

Other plugins by this author: Restrict - membership, site, content and user access restrictions for WordPress

Questions

Is Tickera - Sell Tickets & Manage Events still maintained?

Tickera - Sell Tickets & Manage Events was last updated on 23 Oct 2026. Its Canary status is Healthy.

Is Tickera - Sell Tickets & Manage Events safe?

Tickera - Sell Tickets & Manage Events has no open unpatched vulnerabilities on record. 14 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Tickera - Sell Tickets & Manage Events?

The wordpress.org author is Tickera. Recent committers: tickera, plugin-master. We have recorded no ownership change.

What can I use instead of Tickera - Sell Tickets & Manage Events?

Plugins in the same category with a higher Canary Score: Events Shortcodes For The Events Calendar, Events Widgets For Elementor And The Events Calendar, Sugar Calendar - Events Calendar, Event Tickets, and Events Management Platform, The Events Calendar Shortcode & Block, Ticket Tailor - Event Ticketing & Registration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue