Vollstart vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vollstart products: 2 record(s), with severity, exploitation and fixes.

Serial Codes Generator and Validator with WooCommerce Support 1 Event Tickets with Ticket Scanner 1

Exploited only (KEV) →

CVE-2025-68015 Critical · 9.0 CWE-94 Jan 22, 2026

WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Code Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through <= 2.8.5.

CVE-2025-62091 Medium · 5.4 CWE-862 Dec 31, 2025

WordPress Serial Codes Generator and Validator with WooCommerce Support plugin <= 2.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serial Codes Generator and Validator with WooCommerce Support: from n/a through <= 2.8.2.