Vulnerabilities

TI-2025-42633 CVE-2025-69179 · GHSA-g4j8-cmh5-jmg5

WordPress Support Ticket Management System plugin <= 1.9 - Privilege Escalation vulnerability

MEDIUM 49

Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0045 Published 2026-06-17 No fix listed CWE-266

TI-2026-18105 CVE-2026-22524 · GHSA-w895-qcj5-7ffx

WordPress Legacy Admin plugin <= 9.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Legacy Admin legacy-admin allows Reflected XSS.This issue affects Legacy Admin: from n/a through <= 9.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79

TI-2026-18104 CVE-2026-22523 · GHSA-mq53-xgpg-4wjg

WordPress Ultra WordPress Admin plugin <= 11.7 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra WordPress Admin ultra-admin allows Reflected XSS.This issue affects Ultra WordPress Admin: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79

TI-2025-42634 CVE-2025-69180 · GHSA-wj98-wq6r-99ww

WordPress Ultra Portfolio plugin <= 6.7 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a t…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.003 Published 2026-01-22 No fix listed CWE-89

TI-2025-31468 CVE-2025-49420 · GHSA-p7cj-qq89-wvrh

WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Reflected XSS.This issue affects Ultra Portfolio: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00235 Published 2025-08-20 No fix listed CWE-79

TI-2025-31470 CVE-2025-49422 · GHSA-2882-xfpf-chqj

WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability

MEDIUM 42

Incorrect Privilege Assignment vulnerability in themepassion Support Ticket support-ticket allows Privilege Escalation.This issue affects Support Ticket: from n/a through <= 1.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00452 Published 2025-08-20 No fix listed CWE-266

TI-2025-31472 CVE-2025-49424 · GHSA-pvc5-93jw-p22h

WordPress Support Ticket Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability