Wpsupportplus Wp Support Plus Responsive Ticket System
9 CVEs affecting Wpsupportplus Wp Support Plus Responsive Ticket System. Latest disclosed: 2019-08-22. Critical: 5, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10930 | Critical | 9.8 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number. |
CVE-2014-10389 | Critical | 9.8 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication. |
CVE-2014-10387 | Critical | 9.8 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection. |
CVE-2018-1000131 | Critical | 9.8 | 2018-03-14 | Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets… |
CVE-2014-10390 | Critical | 9.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal. |
CVE-2019-15331 | Medium | 6.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection. |
CVE-2014-10391 | Medium | 6.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection. |
CVE-2019-7299 | Medium | 6.1 | 2019-03-21 | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress al… |
CVE-2014-10388 | Medium | 5.3 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure. |