Threats tagged 'ghsa-63f4-qh3h-4mx3'

The Event Tickets with Ticket Scanner WordPress plugin versions before 3.2.9 contain a vulnerability where search values are not properly escaped before being used in SQL queries in several admin listings. This flaw allows users with admin area access to perform SQL injection attacks. By default, only administrators have this access, but other roles may be granted it through plugin settings.