The Event Tickets plugin for WordPress has a security issue in versions up to 5.11.0.4. This is because there is a problem with verifying the identity of a user when they try to disconnect from a merchant. This could allow someone who is not logged in to the website to disconnect a merchant by tricking the site administrator into clicking on a link.