Project

General

Profile

Actions
Copy link

Bug #15254

closed

Event Tickets plugin can create new user accounts and bypass BuddyPress registration

Added by Raymond Hoh almost 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority name:
Normal
Assignee:
Raymond Hoh
Category name:
WordPress Plugins
Target version:
1.19.3
Start date:
2022-02-03
Due date:
% Done:

0%

Estimated time:
Deployment actions:

Description

Just encountered an issue on the NYCDH site where the Event Tickets plugin was activated on the sub-site and it was able to bypass the main BuddyPress registration page.

The Events Tickets plugin has a RSVP module that will allow a user to RSVP for an event through a web form. This web form doesn't require a user to be authenticated and will create a new user in WordPress by default. It is possible to to allow only logged-in users to RSVP for an event, but this option must be enabled under "Events > Settings > Tickets" in the admin dashboard.

Will look to only allow logged-in users to RSVP for events with a code snippet.

Related issues

Related to NYCDH Community Site - Bug #15247: Registration issueResolvedRaymond Hoh2022-02-02

Actions
Actions
Copy link

Also available in: Atom PDF