CVE-2026-121857 Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend

The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the Event Tickets with Ticket Scanner WordPress plugin...

CVE-2026-121857

The Event Tickets with Ticket Scanner WordPress plugin, versions prior to 3.1.14 , contains a vulnerability where it fails to verify if a user has permission to manage WooCommerce orders before returning or removing ticket data. This allows any user with access to the plugin's admin area (ranging...