CVE-2016-10930 Support Plus Responsive Ticket System < 7.1.0 - Insecure Direct Object Reference
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpsupportplus wp support plus responsive ticket system | < 7.1.0 | 7.1.0 |
| wordpress wp-support-plus-responsive-ticket-system(WordPress) | < 7.1.0 | 7.1.0 |
References
- wordpress.org release-notes
- Wordfence Intelligence third-party-advisory
- www.cve.org