{"vulnerability": "CVE-2026-105889", "sightings": [{"uuid": "efb3bf1a-40f9-4a3a-91d7-6d5388839bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417729819184287", "content": "CVE-2026-105889 WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105889https://patchstack.com/database/wordpress/plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-plugin-3-6-0-6-sql-injection-vulnerability?_s_id=cve#Tickera#CVE_2026_105889#bot", "creation_timestamp": "2026-10-10T17:12:52.172989Z"}, {"uuid": "465ab1a9-0c85-43e1-a18e-401e83dd6215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxjzdyx2tq2b", "content": "\ud83d\udd34 CVE-2026-105889 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105889/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T17:30:59.458663Z"}, {"uuid": "ac2f0b54-c79e-4e93-8010-fecc54257008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a2hes6brznyzf", "content": "CVE-2026-105889 - WordPress Tickera plugin\nCVE ID : CVE-2026-105889\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticket...", "creation_timestamp": "2026-10-10T17:43:09.505481Z"}, {"uuid": "cd7b49c7-c318-4d6b-adf3-35790bebc0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxk3f2or3222", "content": "\ud83d\udea8 CVE-2026-105889 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ticke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105889\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T18:07:21.573926Z"}, {"uuid": "92798d8b-da79-4332-b379-c91e4a9c8e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk3jvwwjc22", "content": "CVE-2026-105889 - tickera\nThe Tickera ticketing plugin for WordPress (versions up to 3.6.0.6) does not properly check data it receives, allowing a hidden SQL injection attack. An attacker could use this to view or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tickera #CVE #infosec", "creation_timestamp": "2026-10-10T18:10:04.660698Z"}, {"uuid": "28274ae1-8219-4cbb-b310-092abc77e588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.236686Z"}, {"uuid": "08d3d4a2-c57c-4f62-9646-1311ed8cfd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4jubhas2n", "content": "2. CVE-2026-105889 \u00b7 2 people\n\ud83d\udfe5 Critical 9.3 \u00b7 Tickera\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.", "creation_timestamp": "2026-10-10T18:27:58.218790Z"}]}