CVE-2023-25997

Vulnerability

The Sola Support Ticket plugin for WordPress (versions through 3.17) contains a Missing Authorization vulnerability [1]. The plugin fails to properly enforce access control checks on certain endpoints, allowing unauthorized actions. The plugin has been closed and removed from the WordPress.org plugin directory as of December 3, 2025, due to a Guideline Violation [1].

Exploitation

An attacker with network access to a WordPress site running the vulnerable plugin can send crafted HTTP requests to bypass authorization checks. No authentication is required if the vulnerable endpoints are exposed to unauthenticated users. The exact sequence of steps depends on the specific missing authorization, but typically involves manipulating parameters or accessing administrative functions directly.

Impact

Successful exploitation allows an attacker to perform actions that should require higher privileges, such as viewing or modifying support tickets, accessing sensitive data, or altering plugin settings. The impact is limited to the scope of the plugin's functionality, but could lead to information disclosure or privilege escalation within the WordPress environment.

Mitigation

No patched version is available because the plugin has been closed and removed from the WordPress.org directory [1]. Users who have the plugin installed should uninstall it immediately and seek alternative support ticket solutions. There is no known workaround for the vulnerability.