Vulnerabilities

TI-2019-11435 CVE-2019-15331 · GHSA-48x2-vpjj-qchr

The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.

LOW 29

The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-22 No fix listed CWE-79

TI-2016-08968 CVE-2016-10930 · GHSA-fwjx-7x5h-pg37

The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has…

MEDIUM 46

The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02016 Published 2019-08-22 No fix listed CWE-20

TI-2014-08249 CVE-2014-10387 · GHSA-3873-3x3p-6gpc

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.

MEDIUM 46

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01795 Published 2019-08-22 No fix listed CWE-89

TI-2014-08250 CVE-2014-10388 · GHSA-796r-6h8h-p3r5

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.

LOW 27

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01332 Published 2019-08-22 No fix listed CWE-200

TI-2014-08251 CVE-2014-10389 · GHSA-f4hx-5jg8-hg94

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.

MEDIUM 46

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02217 Published 2019-08-22 No fix listed CWE-287

TI-2014-08252 CVE-2014-10390 · GHSA-phfp-96hg-9gc9

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.

MEDIUM 44

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02503 Published 2019-08-22 No fix listed CWE-22

TI-2014-08253 CVE-2014-10391 · GHSA-6wfc-83w3-9jx9

The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.

LOW 29

The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-22 No fix listed CWE-74

TI-2019-05188 CVE-2019-7299 · GHSA-5f6x-6gm2-mcrf

A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the…

LOW 31

A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01662 Published 2019-03-18 No fix listed CWE-79

TI-2018-15783 CVE-2018-1000131 · GHSA-2fc8-f6cq-59vj

Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier…

MEDIUM 46

Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result i…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02052 Published 2018-03-14 No fix listed CWE-89

Vulnerabilities

Filters