PT-2019-14060

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system versions prior to 9.1.2 Description The issue allows for HTML injection. Recommendations For versions prior to 9.1.2, update to version 9.1.2 or later to resolve the issue...

PT-2019-7064

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns full path disclosure in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update t...

PT-2019-7065

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns incorrect authentication in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, upda...

PT-2019-7066

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue concerns directory traversal in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...

PT-2019-7067

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.1 Description The issue concerns JavaScript injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.1, update t...

PT-2019-7063

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 4.2 Description The issue is related to SQL injection in the wp-support-plus-responsive-ticket-system plugin for WordPress. Recommendations For versions prior to 4.2, update to...

PT-2019-7726

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 7.1.0 Description The issue is related to an insecure direct object reference via a ticket number. Recommendations For versions prior to 7.1.0, update to version 7.1.0 or later ...

CVE-2019-15331: Improper Neutralization of Input During Web Page Generation

The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...

CVE-2014-10388: Exposure of Sensitive Information to an Unauthorized Actor

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...

CVE-2014-10390: Improper Limitation of a Pathname to a Restricted Directory

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal...

CVE-2014-10391: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...

CVE-2016-10930: Improper Input Validation

The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the submitticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in...

CVE-2019-7299

CVE-2019-7299 concerns a stored XSS in the WP Support Plus Responsive Ticket System WordPress plugin, specifically in submit_ticket.php (path: wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php) for version 9.1.1. The vulnerability allows injection of arbi...

CVE-2019-7299: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the submitticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in...

PT-2019-18518

Name of the Vulnerable Software and Affected Versions WP Support Plus Responsive Ticket System plugin version 9.1.1 Description A stored cross-site scripting issue in the submit ticket.php module allows remote attackers to inject arbitrary web script or HTML via the subject parameter in the...

WP Support Plus Responsive Ticket System < 8.0.8 - Remote Code Execution (RCE)

WP Support Plus Responsive Ticket System = 8.0.7 allows anyone to upload PHP files with extensions like ".phtml", ".php4", ".php5", and so on, all of which are run as if their extension was ".php" on most hosting platforms. This is because "includes/admin/attachment/uploadAttachment.php" contains...

WP Support Plus Responsive Ticket System < 8.0.0 - Privilege Escalation

You can login as anyone without knowing password because of incorrect usage of wpsetauthcookie. PoC Username:...

WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection

Homepage: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Description: Type user access: any user. $POST‘catid’ is not escaped. Is accessible for any user. File / Code: Path: /wp-content/wp-support-plus-responsive-ticket-system/includes/admin/wpspgetCatName.php Line: 4...

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation

Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...