CVE-2024-10625

CVE-2024-10625 affects the WooCommerce Support Ticket System plugin for WordPress. It enables unauthenticated deletion of arbitrary files via delete_tmp_uploaded_file() due to insufficient path validation in versions up to 17.7, with potential remote code execution when critical files (e.g., wp-c...

CVE-2024-10626

CVE-2024-10626 affects WooCommerce Support Ticket System for WordPress (plugin) up to version 17.7. Root cause: insufficient file path validation in delete_uploaded_file(), allowing authenticated users with Subscriber+ privileges to delete arbitrary files (e.g., wp-config.php). Impact: potential ...

CVE-2024-10627

CVE-2024-10627 affects WooCommerce Support Ticket System for WordPress. The vulnerability is an arbitrary file upload flaw caused by missing file type validation in the ajax_manage_file_chunk_upload() function, present in all versions up to 17.7. The issue allows unauthenticated attackers to uplo...

CVE-2024-13775

CVE-2024-13775 affects the WordPress plugin WooCommerce Support Ticket System (versions up to 17.8). The vulnerability arises from missing capability checks in three AJAX functions: ajax_delete_message , ajax_get_customers_partial_list , and ajax_get_admins_list , enabling an authenticated attack...