Threats tagged 'ghsa-2jgp-jmw3-73mf'

The Event Tickets with Ticket Scanner WordPress plugin versions before 3.1.14 have an authorization flaw that allows users with access to the plugin's admin area, including roles as low as Subscriber, to view and remove ticket data from WooCommerce orders without proper permission checks.