What is GHSA-63f4-qh3h-4mx3?

GHSA-63f4-qh3h-4mx3 is a security advisory published by GitHub Security Advisories with Medium severity. The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a...

Which CVE IDs does GHSA-63f4-qh3h-4mx3 cover?

GHSA-63f4-qh3h-4mx3 covers the following CVE IDs: CVE-2026-121858. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-63f4-qh3h-4mx3?

GHSA-63f4-qh3h-4mx3 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-63f4-qh3h-4mx3MediumCVSS 6.3

The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a...

Vendor

GitHub Security Advisories

Published

November 7, 2026

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-121858 →

📋 Description

The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in SQL queries in several of its admin listings, allowing users with access to its admin area (administrators by default, or any role granted access in its settings) to perform SQL injection attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121858
https://wpscan.com/vulnerability/8472ed42-2e1a-4efb-97b8-f01639772580
https://github.com/advisories/GHSA-63f4-qh3h-4mx3