CVE-2026-9848 WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

🗓️ 13 Jun 2026 02:29:03Reported by WordfenceType

Unauthenticated SQL Injection in WP Ticket up to 6.0.4 via WordPress search parameter s, due to unsafe UNION query construction.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2026-9848	13 Jun 202602:29	–	cve
EUVD	EUVD-2026-36636	13 Jun 202602:29	–	euvd
NVD	CVE-2026-9848	13 Jun 202603:16	–	nvd
Positive Technologies	PT-2026-49077	13 Jun 202600:00	–	ptsecurity

[
  {
    "vendor": "emarket-design",
    "product": "Customer Support Ticket System & Helpdesk",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.0.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-ticket/tags/6.0.4/includes/filter-functions.php
plugins	www.plugins.trac.wordpress.org/browser/wp-ticket/tags/6.0.4/includes/common-functions.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/98f16e3a-4ef3-43f9-86b2-2cf8e26f9c80
plugins	www.plugins.trac.wordpress.org/changeset/3565099/wp-ticket/trunk/includes/common-functions.php
plugins	www.plugins.trac.wordpress.org/browser/wp-ticket/tags/6.0.4/includes/query-filters.php
plugins	www.plugins.trac.wordpress.org/browser/wp-ticket/tags/6.0.4/includes/common-functions.php

13 Jun 2026 02:29Current

CVSS 3.17.5

CWE-89