Wpsupportplus Wp Support Plus Responsive Ticket System — known CVE vulnerabilities

Every CVE whose affected-product data names Wpsupportplus Wp Support Plus Responsive Ticket System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2016-10930 — CVSS 9.8 (critical): The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
• CVE-2018-1000131 — CVSS 9.8 (critical): Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the…
• CVE-2014-10389 — CVSS 9.8 (critical): The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
• CVE-2014-10387 — CVSS 9.8 (critical): The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.
• CVE-2014-10390 — CVSS 9.1 (critical): The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
• CVE-2019-7299 — CVSS 6.1 (medium): A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin…
• CVE-2014-10391 — CVSS 6.1 (medium): The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
• CVE-2019-15331 — CVSS 6.1 (medium): The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
• CVE-2014-10388 — CVSS 5.3 (medium): The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.