Wp Support Plus Responsive Ticket System
by WordPress
CVEs (12)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-10930 | Cri | 0.64 | 9.8 | 0.02 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number. | ||
| CVE-2014-10389 | Cri | 0.64 | 9.8 | 0.02 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication. | ||
| CVE-2014-10387 | Cri | 0.64 | 9.8 | 0.02 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection. | ||
| CVE-2018-1000131 | Cri | 0.64 | 9.8 | 0.02 | Mar 14, 2018 | Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be… | ||
| CVE-2014-10390 | Cri | 0.59 | 9.1 | 0.03 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal. | ||
| CVE-2019-15331 | Med | 0.40 | 6.1 | 0.01 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection. | ||
| CVE-2014-10391 | Med | 0.40 | 6.1 | 0.01 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection. | ||
| CVE-2019-7299 | Med | 0.40 | 6.1 | 0.02 | Mar 21, 2019 | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in… | ||
| CVE-2014-10388 | Med | 0.35 | 5.3 | 0.01 | Aug 22, 2019 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure. | ||
| CVE-2026-11875 | Med | 0.00 | 5.3 | 0.00 | Jul 9, 2026 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's… | ||
| CVE-2026-11590 | Hig | 0.00 | 8.6 | 0.00 | Jun 30, 2026 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. | ||
| CVE-2026-11589 | Hig | 0.00 | 8.8 | 0.01 | Jun 30, 2026 | The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored… |
- risk 0.64cvss 9.8epss 0.02
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
- risk 0.64cvss 9.8epss 0.02
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
- risk 0.64cvss 9.8epss 0.02
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.
- risk 0.64cvss 9.8epss 0.02
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be…
- risk 0.59cvss 9.1epss 0.03
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
- risk 0.40cvss 6.1epss 0.01
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
- risk 0.40cvss 6.1epss 0.01
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
- risk 0.40cvss 6.1epss 0.02
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in…
- risk 0.35cvss 5.3epss 0.01
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.
- risk 0.00cvss 5.3epss 0.00
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's…
- risk 0.00cvss 8.6epss 0.00
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
- risk 0.00cvss 8.8epss 0.01
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored…