Lucene search
+L

15 matches found

Kitploit
Kitploit
•added 2026/09/24 3:59 p.m.•13 views

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 is an Unauthenticated SQL Injection SQLi vulnerability affecting the WP Ticket Customer Support Ticket System & Helpdesk plugin for WordPress up to and including version 6.0.4.The flaw occurs because the plugin takes the WordPress search parameter s and concatenates it...

7.5CVSS6.1AI score0.00554EPSS
SaveExploits1
NVD
NVD
•added 2026/06/13 3:16 a.m.•27 views

CVE-2026-9848

The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter s in versions up to, and including, 6.0.4 The plugin hooks WordPress's postsrequest filter with wpticketcompostsrequest, which calls emdauthorsearchresults when the current request is an...

7.5CVSS0.00554EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2026/06/13 2:29 a.m.•55 views

CVE-2026-9848 WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter s in versions up to, and including, 6.0.4 The plugin hooks WordPress's postsrequest filter with wpticketcompostsrequest, which calls emdauthorsearchresults when the current request is an...

7.5CVSS0.00554EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/13 12:00 a.m.•0 views

CVE-2026-9848: Improper Neutralization of Special Elements used in an SQL Command

The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter s in versions up to, and including, 6.0.4 The plugin hooks WordPress's postsrequest filter with wpticketcompostsrequest, which calls emdauthorsearchresults when the current request is an...

7.5CVSS5.6AI score0.00554EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-40793

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00557EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•16 views

WordPress plugin WP Ticket Customer Service Software & Support Ticket System Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to set up a personal blog site on a PHP and MySQL based...

6.5CVSS5.6AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•2 views

CVE-2025-60157: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Stored XSS.This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a throu...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/23 2:12 a.m.•14 views

WordPress WP Ticket Customer Service Software & Support Ticket System plugin <= 6.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin WP Ticket Customer Service Software & Support Ticket System versions = 6.0.0...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•1 views

CVE-2025-53584: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Object Injection.This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through = 6.0.2...

8.1CVSS5.8AI score0.00325EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:46 p.m.•13 views

CVE-2024-44011

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through = 1.0.5...

7.5CVSS5.9AI score0.00557EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/05 11:15 a.m.•31 views

CVE-2024-44011

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through = 1.0.5...

7.5CVSS0.00557EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/05 10:33 a.m.•34 views

CVE-2024-44011 WordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through = 1.0.5...

7.5CVSS0.00557EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/05 10:33 a.m.•58 views

CVE-2024-44011

CVE-2024-44011 describes a Local File Inclusion (path traversal) vulnerability in the WordPress plugin “WP Ticket Ultra Help Desk & Support Plugin” (affected:

7.5CVSS5.9AI score0.00557EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/05 10:33 a.m.•13 views

CVE-2024-44011 WordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Ticket Ultra WP Ticket Ultra Help Desk & Support Plugin allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through 1.0.5...

7.5CVSS6.9AI score0.00557EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•0 views

CVE-2024-44011: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through = 1.0.5...

7.5CVSS5.8AI score0.00557EPSS
SaveExploits0References1
Rows per page
Query Builder