TI-2015-06374 CVE-2015-7670 · GHSA-r4g6-w8x4-v5v5Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket…Priority MEDIUM 48Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03117 · Published 2017-09-26 · No fix listed CWE-89