wpsupportplus vulnerabilities

Products

• wp support plus responsive ticket system 9

Latest wpsupportplus CVEs

Newest publication first

1. CVE-2019-15331 WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting

   Published 2019-08-22

   Medium·CVSS 6.1 EPSS 0.91%

   The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.

2. CVE-2016-10930 Support Plus Responsive Ticket System < 7.1.0 - Insecure Direct Object Reference

   Published 2019-08-22

   Critical·CVSS 9.8 EPSS 2.0%

   The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.

3. CVE-2014-10387 Support Plus Responsive Ticket System <= 4.1 - SQL Injection

   Published 2019-08-22

   Critical·CVSS 9.8 EPSS 1.8%

   The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.

4. CVE-2014-10388 Support Plus Responsive Ticket System <= 4.1 - Full Path Disclosure

   Published 2019-08-22

   Medium·CVSS 5.3 EPSS 1.3%

   The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.

5. CVE-2014-10389 WP Support Plus Responsive Ticket System <= 4.1 - Improper Authentication

   Published 2019-08-22

   Critical·CVSS 9.8 EPSS 2.2%

   The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.

6. CVE-2014-10390 WP Support Plus Responsive Ticket System <= 4.1 - Directory Traversal

   Published 2019-08-22

   Critical·CVSS 9.1 EPSS 2.5%

   The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.

7. CVE-2014-10391 WP Support Plus Responsive Ticket System <= 4.0 - JavaScript Injection

   Published 2019-08-22

   Medium·CVSS 6.1 EPSS 0.91%

   The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.

8. CVE-2019-7299 WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting

   Published 2019-03-18

   Medium·CVSS 6.1 EPSS 1.7%

   A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-p...

9. CVE-2018-1000131 WP Support Plus Responsive Ticket System <= 9.0.2 - SQL Injection

   Published 2018-03-14

   Critical·CVSS 9.8 EPSS 2.1%

   Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.