CVE-2026-11875

The WP Support Plus Responsive Ticket System WordPress plugin, in versions through 9.1.2 , is vulnerable to unauthenticated support ticket access due to a session cookie forgery flaw. The plugin fails to sign or verify its guest-session cookie , which allows an attacker to forge the cookie and im...

EUVD-2009-5011

Malware in sbrugna...

CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...