Medium severity6.5NVD Advisory· Published May 2, 2023· Updated Jun 17, 2026
CVE-2023-1125
CVE-2023-1125
Description
The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Ruby Help Deskdescription
- Range: <1.3.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.