Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-10
Event Tickets with Ticket Scanner - Security Vulnerability (CVE-2026-121858)
The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks.
PLUGIN
Event Tickets with Ticket Scanner
CVE-2026-121858
Risk Score
Threat Entry
Updated 2026-11-10
Event Tickets with Ticket Scanner - Security Vulnerability (CVE-2026-121857)
The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the Event Tickets with Ticket Scanner WordPress plugin before 3.1.14's admin area (down to Subscriber) to view other customers' ticket codes and names and to remove tickets from their orders.
PLUGIN
Event Tickets with Ticket Scanner
CVE-2026-121857
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets With Ticket Scanner - Remote Code Execution (CVE-2025-68015)
Improper Control of Generation of Code ('Code Injection') vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through
PLUGIN
Event Tickets With Ticket Scanner
CVE-2025-68015
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets With Ticket Scanner - Cross-Site Scripting (XSS) (CVE-2024-6711)
The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks
PLUGIN
Event Tickets With Ticket Scanner
CVE-2024-6711
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets With Ticket Scanner - Cross-Site Request Forgery (CSRF) (CVE-2025-1762)
The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
PLUGIN
Event Tickets With Ticket Scanner
CVE-2025-1762
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets with Ticket Scanner - Broken Access Control (CVE-2024-9866)
The Event Tickets with Ticket Scanner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameters in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping and missing authorization on the functionality to manage tickets. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This missing authorization aspect of this was patched in 2.4.1, while the Cross-Site Scripting was fully patched…
PLUGIN
Event Tickets with Ticket Scanner
CVE-2024-9866
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets With Ticket Scanner - PHP Object Injection (CVE-2024-52427)
Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through
PLUGIN
Event Tickets With Ticket Scanner
CVE-2024-52427
Risk Score
Threat Entry
Updated 2026-06-17
Event Tickets With Ticket Scanner - Cross-Site Scripting (XSS) (CVE-2024-35652)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.1.
PLUGIN
Event Tickets With Ticket Scanner
CVE-2024-35652
Risk Score