CVE-2025-68015: RCE in Event Tickets with Ticket Scanner

The impact of this RCE vulnerability is severe. An attacker who successfully exploits this flaw can execute arbitrary code on the affected WordPress server with the privileges of the web server user. This could lead to complete compromise of the server, including data theft, modification, or deletion. Attackers could also use the compromised server as a launchpad for further attacks against other systems on the network. The ability to inject code directly opens the door to a wide range of malicious activities, including installing backdoors, injecting malware, and defacing the website.

1. Reserved2025-12-15
2. Published2026-01-22
3. Modified2026-04-28
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-68015 is to immediately upgrade the Event Tickets with Ticket Scanner plugin to version 2.8.6 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider temporarily disabling the plugin. While a direct WAF rule is difficult to implement for code injection, strict input validation and output encoding within the plugin's codebase (if possible) can offer some limited protection. Monitor WordPress logs for suspicious activity, particularly attempts to execute unusual commands or access sensitive files.

Active installs

1KNiche

Plugin rating