4 matches found
CVE-2024-52427
CVE-2024-52427 affects WordPress Plugin Event Tickets with Ticket Scanner (
CVE-2025-1762
The Event Tickets with Ticket Scanner WordPress plugin, in versions prior to 2.5.4 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating settings. An attacker could trick a logged-in administrator into making unauthorized changes to the plugin's ...
CVE-2024-6711
The Event Tickets with Ticket Scanner WordPress plugin versions prior to 2.3.8 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain parameters. This flaw allows users with a role as low as admin to perform Cross-Site Sc...
CVE-2024-35652
CVE-2024-35652 is a reflected XSS in the WordPress plugin Event Tickets with Ticket Scanner. According to the description, the vulnerability arises from Improper Neutralization of Input During Web Page Generation and affects Event Tickets with Ticket Scanner versions from n/a up to 2.3.1. The inc...