Known vulnerabilities in Event Tickets with Ticket Scanner

Sell tickets with WooCommerce: seating plans, PDF tickets with QR codes, door scanner. No per-ticket service fees; free version up to 50 tickets.

7Reported vulnerabilities

9.8Highest CVSS score

3.1.6Latest version

1,000+Active installs

What to do now

Update Event Tickets with Ticket Scanner to 2.8.6 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-68015	Critical 9.8	0.3%	2.8.5 and earlier	`2.8.6`	January 15, 2026
CVE-2024-52427	High 8.8	0.7%	2.3.11 and earlier	`2.3.12`	November 15, 2024
CVE-2025-1762	Medium 4.3	0.2%	Before 2.5.4	`2.5.4`	March 28, 2025
CVE-2024-6711	Low 3.5	0.3%	Before 2.3.8	`2.3.8`	May 15, 2025
WF-2ec40d89-9caa-44dc-8577-00fa6463348c	Medium 6.4	—	Before 1.5.5	`1.5.5`	August 18, 2023
CVE-2024-35652	Medium 6.1	0.3%	2.3.1 and earlier	`2.3.2`	June 3, 2024
CVE-2024-9866	Medium 5.4	0.3%	2.4.3 and earlier	`2.4.4`	December 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.