CVE-2026-9848: WP Ticket Unauthenticated SQL Injection (CVSS 7.5)

CVE-2026-9848 is a CVSS 7.5 SQL Injection vulnerability in WP Ticket ≤ 6.0.4. An unauthenticated attacker can extract any data from the database via the WordPress search parameter.