Wright Websites first-party cookie consent: preferences, language, and optional marketing features are described in the machine-readable declaration below and in our cookie policy.
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated users to change the status of existing orders.