Extension WordPress
Vulnérabilités WP Support Plus Responsive Ticket System
Cette page rassemble les failles publiées pour WP Support Plus Responsive Ticket System, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Support Plus Responsive Ticket System
12 fiches
WP Support Plus Responsive Ticket System <= 9.1.1 – Stored Cross-Site Scripting
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
[*, 9.1.2)
9.1.2
04/02/2019
WP Support Plus Responsive Ticket System <= 9.1.1 – Stored Cross-Site Scripting
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php.
[*, 9.1.2)
9.1.2
04/02/2019
WP Support Plus Responsive Ticket System <= 9.0.2 – SQL Injection
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This…
*-9.0.2
9.0.3
25/02/2018
WP Support Plus Responsive Ticket System <= 8.0.7 – Arbitrary File Upload
The WP Support Plus Responsive Ticket System plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including 8.0.7. This is due to insufficient file type validation on the wpsp_upload_attachment AJAX action which makes…
[*, 8.0.8)
8.0.8
11/11/2017
WP Support Plus Responsive Ticket System <= 7.1.4 – SQL Injection
The WP Support Plus Responsive Ticket System plugin for WordPress is vulnerable to generic SQL Injection via the "$_POST[‘cat_id’]" parameter in versions up to, and including, 7.1.4 due to insufficient escaping on the user supplied parameter and lack…
*-7.1.4
8.0.0
12/12/2016
Support Plus Responsive Ticket System < 7.1.0 – Insecure Direct Object Reference
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
[*, 7.1.0)
7.1.0
20/09/2016
WP Support Plus Responsive Ticket System <= 7.1.4 – Authentication Bypass
The WP Support Plus Responsive Ticket System plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 7.1.4. This is due to the plugin only requiring a valid email for the loginGuestFacebook AJAX action…
[*, 8.0.0)
8.0.0
12/06/2016
WP Support Plus Responsive Ticket System <= 4.1 – Directory Traversal
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
[*, 4.2)
4.2
15/11/2014
WP Support Plus Responsive Ticket System <= 4.1 – Improper Authentication
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
*-4.1
4.2
15/11/2014
WP Support Plus Responsive Ticket System <= 4.0 – JavaScript Injection
The WP Support Plus Responsive Ticket System plugin for WordPress is vulnerable to JavaScript Injection in versions up to, and including, 4.0. This makes it possible for unauthenticated attackers to inject potentially malicious JavaScript code into the vulnerable…
*-4.0
4.1
04/11/2014
Support Plus Responsive Ticket System <= 4.1 – Full Path Disclosure
The Support Plus Responsive Ticket System plugin before 4.2 for WordPress has full path disclosure.
[*, 4.2)
4.2
09/09/2014
Support Plus Responsive Ticket System <= 4.1 – SQL Injection
The Support Plus Responsive Ticket System plugin before 4.2 for WordPress has SQL injection.
[*, 4.2)
4.2
09/09/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.