CVE-2021-24839

creationtimestamp| type| source ---|---|--- 2022-02-07 18:34:56+00:00| seen| https://t.me/cibsecurity/36945...

CVE-2021-24839

The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsctickets AJAX action, which could allow unauthenticated users to call it and delete arbitrary tickets via the setdeletepermanentlybulkticket settingaction. Other actions may be affected as well...