WordPress WP Support Plus Responsive Ticket System plugin <= 9.1.2 - Unauthenticated Stored XSS via File Upload vulnerability

Unauthenticated Stored XSS via File Upload vulnerability discovered by Ayush Srivastava in WordPress Plugin WP Support Plus Responsive Ticket System versions = 9.1.2...

CVE-2026-11875: Undefined Security Weakness

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner identified by email address to read, reply to, and close that person's support tickets...

CVE-2026-11590: Undefined Security Weakness

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-11589: Undefined Security Weakness

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript such as HTML or SVG to a publicly accessible location, leading to Stored Cross-Site Scripting attac...

EUVD-2014-1160

Malware in sbrugna...

WordPress wp-support-plus-responsive-ticket-system plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-support-plus-responsive-ticket-system is a ticket system plugin used in it. A cross-site scripting vulnerability exists in WordPres...

CVE-2014-10388

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...

Sql injection

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection...

Design/Logic Flaw

The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...

CVE-2019-15331

The CVE-2019-15331 entry concerns the WordPress plugin wp-support-plus-responsive-ticket-system, affected in all versions prior to 9.1.2. Multiple connected sources confirm a vulnerability described as HTML injection / stored cross-site scripting (XSS) in this plugin. The vulnerability stems from...

CVE-2014-10389: Improper Authentication

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...

CVE-2014-10387: Improper Neutralization of Special Elements used in an SQL Command

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection...

PT-2019-14060

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system versions prior to 9.1.2 Description The issue allows for HTML injection. Recommendations For versions prior to 9.1.2, update to version 9.1.2 or later to resolve the issue...

PT-2019-7064

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns full path disclosure in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update t...

PT-2019-7065

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns incorrect authentication in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, upda...

PT-2019-7066

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns directory traversal in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...

PT-2019-7067

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.1 Description The issue concerns JavaScript injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.1, update t...

PT-2019-7063

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue is related to SQL injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...

PT-2019-7726

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 7.1.0 Description The issue is related to an insecure direct object reference via a ticket number. Recommendations For versions prior to 7.1.0, update to version 7.1.0 or later ...

CVE-2019-15331: Improper Neutralization of Input During Web Page Generation

The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...