https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6711.htmlhttps://patchthecve.com/cve/CVE-2024-6711.htmlWed, 17 Jun 2026 08:18:31 +0000LOW 3.5: The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attackshttps://patchthecve.com/cve/CVE-2025-1762.htmlhttps://patchthecve.com/cve/CVE-2025-1762.htmlWed, 17 Jun 2026 08:39:44 +0000MEDIUM 4.3: The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackhttps://patchthecve.com/cve/CVE-2024-52427.htmlhttps://patchthecve.com/cve/CVE-2024-52427.htmlWed, 17 Jun 2026 08:07:12 +0000CRITICAL 9.9: Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2.3.11.