rcatheme

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

rcatheme records in CISA KEV

No rcatheme vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-12482 CVE-2025-13660 · GHSA-q9hm-444g-qc4h

Guest Support <= 1.2.3 - Unauthenticated User Email Disclosure in guest_support_handler AJAX Endpoint

LOW 30

The Guest Support plugin for WordPress is vulnerable to User Email Disclosure in versions up to, and including, 1.2.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2025-12-12 No fix listed CWE-200

TI-2025-05381 CVE-2025-5957 · GHSA-p3mm-64pw-w23h

Missing authorization in rcatheme Guest Support

LOW 30

The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteMassTickets' function in all versi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2025-07-08 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0