CVE-2025-68015

CRÍTICO 9.0CVE-2025-68015 · Published 22/01/2026 · updated 17/06/2026

Em resumo

CVE-2025-68015 é uma vulnerabilidade CRÍTICO (CVSS 9.0).
Chance de exploração nos próximos 30 dias (EPSS): 0.38%, maior que 31.9% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2.8.5.

References

patchstack.com/database/Wordpress/Plugin/event-tickets-with-ticket-scanner/vulnerability/wordpress-event-tickets-with-ticket-scanner-plugin-2-7-10-remote-code-execution-rce-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free