Vendor

    Pretix

    37 known vulnerabilities in products by Pretix, 0 of them actively exploited (CISA KEV).

    Key figures

    37

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Pretix
    CriticalCVE-2024-27447

    Pretix: security vulnerability

    		9.8
    CriticalCVE-2026-13603

    SSRF with API key leak in pretix-oppwa

    		—
    HighCVE-2026-57532

    Pretix: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    		—
    MediumCVE-2026-101274

    Pretix: Missing Authentication for Critical Function

    		—
    HighCVE-2026-13602

    Session takeover vulnerability

    		—
    MediumCVE-2026-82838

    Default webserver configuration with incorrect CSP

    		—
    MediumCVE-2026-101273

    Giftcard enumeration

    		—
    MediumCVE-2026-13225

    Stored XSS in ticket confirmation page

    		—
    MediumCVE-2026-13222

    Insufficient validation of payment status in pretix-oppwa

    		—
    MediumCVE-2026-57536

    Insufficient validation of payment status in pretix-mollie

    		—
    MediumCVE-2026-13223

    Insufficient validation of payment status in pretix-computop

    		—
    HighCVE-2026-2452

    Unsafe variable evaluation in email templates

    		6.5
    HighCVE-2026-2451

    Unsafe variable evaluation in email templates

    		6.5
    HighCVE-2026-2415

    Unsafe variable evaluation in email templates

    		5.9
    HighCVE-2026-5599

    API allows deletion of users of other instance

    		—
    HighCVE-2026-4982

    Unauthorized access to chat contents

    		—
    MediumCVE-2026-12862

    XLSX formula injection in exports

    		—
    MediumCVE-2026-12863

    Open redirect

    		—
    LowCVE-2026-101272

    Incorrect session validation for API-created shredder exports

    		—
    HighCVE-2024-8113

    Stored XSS in Placeholder Samples in Mail Preview

    		5.4
    MediumCVE-2026-5600

    Pretix: Improper Isolation or Compartmentalization

    		4.3
    MediumCVE-2025-13742

    Limited HTML injection in emails

    		6.1
    LowCVE-2026-101267

    Revenue information leak

    		—
    LowCVE-2026-101269

    Incorrect session validation for API-uploaded files

    		—
    LowCVE-2026-57534

    Stored XSS in pretix-pages

    		—

    All vulnerabilities in search

    Products

    Products by Pretix
    Pretix240
    Venueless60
    Pretix-oppwa30