Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend

Description

The plugin does not check that a user may manage WooCommerce orders before returning or removing ticket data for any order, allowing any role an administrator has granted access to the plugin's admin area (down to Subscriber) to view other customers' ticket codes and names and to remove tickets from their orders.