Wp Support Plus Responsive Ticket System
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_support_plus_responsive_ticket_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Support Plus Responsive Ticket System (0d4ea96b-e41b-53e6-b7a8-415b5140adde) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11875 |
vulnerable | 2026-07-29 00:23:31.745750 |
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.
Published: 2026-07-09T06:00:02.497Z
Updated: 2026-07-09T14:44:24.978Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11590 |
vulnerable | 2026-07-29 00:23:31.464863 |
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection via filter[elements] Array Keys
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
Published: 2026-06-30T06:00:01.843Z
Updated: 2026-06-30T14:23:36.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11589 |
vulnerable | 2026-07-29 00:23:31.464672 |
WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored XSS via File Upload
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored Cross-Site Scripting attacks against site users and administrators.
Published: 2026-06-30T06:00:01.626Z
Updated: 2026-06-30T13:38:16.835Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.