Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Vollstart Clear all filters
TI-2025-41624 CVE-2025-68015 · GHSA-vmvc-hm7f-cf66

WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00379 Published 2026-01-22 No fix listed CWE-94
TI-2025-38414 CVE-2025-62091 · GHSA-fxf2-4r6f-c9jr

Missing authorization in Vollstart Serial Codes Generator and Validator with WooCommerce…

Priority LOW 24

Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Exploiting Incorrectly Configured Access Control Security Levels.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
TI-2024-06220 CVE-2024-6711 · GHSA-chgf-rv7c-3x2f

Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS

Priority MEDIUM 50

The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00331 Published 2025-05-15 Fixed in 2.3.8 CWE-79
TI-2025-01518 CVE-2025-1762 · GHSA-475h-5v9w-xfp6

Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF

Priority MEDIUM 53

The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0017 Published 2025-03-28 Fixed in 2.5.4 CWE-352
TI-2025-22124 CVE-2025-30854 · GHSA-c5px-mrpf-jph6

Cross-site request forgery in Vollstart Serial Codes Generator and Validator with…

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Cross Site Request Forgery.This issue affects Serial…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00171 Published 2025-03-27 No fix listed CWE-352
TI-2024-35098 CVE-2024-52427 · GHSA-h53w-2cq3-cj2p

WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

Priority MEDIUM 44

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Sca…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0074 Published 2024-11-18 No fix listed CWE-82
TI-2024-23521 CVE-2024-35652 · GHSA-qhm8-98h3-r464

WordPress Event Tickets with Ticket Scanner plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticke…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2024-06-04 No fix listed CWE-79