Read the docs

Vollstart

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Vollstart records in CISA KEV

No Vollstart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Tickets With Ticket Scanner 4 records MEDIUM

Records

4 records in Event Tickets With Ticket Scanner · all components

TI-2025-01518 CVE-2025-1762 · GHSA-475h-5v9w-xfp6

Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF

Priority MEDIUM 53

The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0017 Published 2025-03-28 Fixed in 2.5.4 CWE-352
TI-2024-06220 CVE-2024-6711 · GHSA-chgf-rv7c-3x2f

Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS

Priority MEDIUM 50

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00331 Published 2025-05-15 Fixed in 2.3.8 CWE-79
TI-2024-35098 CVE-2024-52427 · GHSA-h53w-2cq3-cj2p

WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 44

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Sca…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0074 Published 2024-11-18 No fix listed CWE-82
TI-2024-23521 CVE-2024-35652 · GHSA-qhm8-98h3-r464

WordPress Event Tickets with Ticket Scanner plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticke…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2024-06-04 No fix listed CWE-79
Open these records in search →