Vollstart

Event Tickets With Ticket Scanner

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2025-68015

  • EPSS 0.07%
  • Veröffentlicht 22.01.2026 16:52:03
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Improper Control of Generation of Code ('Code Injection') vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2...

3.5

CVE-2024-6711

Exploit
  • EPSS 0.27%
  • Veröffentlicht 15.05.2025 20:15:55
  • Zuletzt bearbeitet 13.11.2025 21:15:48

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks

4.3

CVE-2025-1762

Exploit
  • EPSS 0.09%
  • Veröffentlicht 28.03.2025 06:00:03
  • Zuletzt bearbeitet 17.04.2025 13:48:32

The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

8.8

CVE-2024-52427

  • EPSS 12.28%
  • Veröffentlicht 18.11.2024 15:15:06
  • Zuletzt bearbeitet 01.04.2026 16:20:18

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2.3....

6.1

CVE-2024-35652

  • EPSS 0.15%
  • Veröffentlicht 04.06.2024 15:15:46
  • Zuletzt bearbeitet 21.11.2024 09:20:34

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticket Scanner: from n/a through 2....