4 matches found
CVE-2024-52427
CVE-2024-52427 affects WordPress Plugin Event Tickets with Ticket Scanner (
CVE-2025-1762
The Event Tickets with Ticket Scanner WordPress plugin, in versions before 2.5.4 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating settings. This flaw could allow an attacker to force a logged-in administrator to change plugin settings unexpe...
CVE-2024-6711
The Event Tickets with Ticket Scanner WordPress plugin, in versions prior to 2.3.8 , is vulnerable to Cross-Site Scripting (XSS) attacks. The root cause is the insufficient sanitization and escaping of certain parameters. This flaw could allow users with roles as low as admin to perform XSS attac...
CVE-2024-35652
CVE-2024-35652 is a reflected XSS in the WordPress plugin Event Tickets with Ticket Scanner. According to the description, the vulnerability arises from Improper Neutralization of Input During Web Page Generation and affects Event Tickets with Ticket Scanner versions from n/a up to 2.3.1. The inc...