wpsupportplus records
9 published records for vendor wpsupportplus.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 11.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-20 Improper Input Validation1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-287 Improper Authentication1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2014-10389No exploit | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.wpsupportplus · wp support plus responsive ticket system · CWE-287 | Critical9.8 | — | 2.2% | Aug 22, 2019 |
40Plan | CVE-2018-1000131No exploit | Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the functwpsupportplus · wp support plus responsive ticket system · CWE-89 | Critical9.8 | — | 2.0% | Mar 14, 2018 |
40Plan | CVE-2016-10930No exploit | The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.wpsupportplus · wp support plus responsive ticket system · CWE-20 | Critical9.8 | — | 2.0% | Aug 22, 2019 |
40Plan | CVE-2014-10387No exploit | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.wpsupportplus · wp support plus responsive ticket system · CWE-89 | Critical9.8 | — | 1.7% | Aug 22, 2019 |
37Monitor | CVE-2014-10390No exploit | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.wpsupportplus · wp support plus responsive ticket system · CWE-22 | Critical9.1 | — | 2.5% | Aug 22, 2019 |
24Monitor | CVE-2019-7299No exploit | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1wpsupportplus · wp support plus responsive ticket system · CWE-79 | Medium6.1 | — | 1.6% | Mar 21, 2019 |
24Monitor | CVE-2014-10391No exploit | The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.wpsupportplus · wp support plus responsive ticket system · CWE-74 | Medium6.1 | — | 0.9% | Aug 22, 2019 |
24Monitor | CVE-2019-15331No exploit | The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.wpsupportplus · wp support plus responsive ticket system · CWE-79 | Medium6.1 | — | 0.9% | Aug 22, 2019 |
21Monitor | CVE-2014-10388No exploit | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.wpsupportplus · wp support plus responsive ticket system · CWE-200 | Medium5.3 | — | 1.3% | Aug 22, 2019 |
- CVE-2014-1038940Plan
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
CriticalCVSS 9.8No exploitEPSS 2%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2018-100013140Plan
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the funct
CriticalCVSS 9.8No exploitEPSS 2%wpsupportplus · wp support plus responsive ticket systemMar 14, 2018
- CVE-2016-1093040Plan
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
CriticalCVSS 9.8No exploitEPSS 2%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2014-1038740Plan
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.
CriticalCVSS 9.8No exploitEPSS 1%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2014-1039037Monitor
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
CriticalCVSS 9.1No exploitEPSS 2%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2019-729924Monitor
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1
MediumCVSS 6.1No exploitEPSS 1%wpsupportplus · wp support plus responsive ticket systemMar 21, 2019
- CVE-2014-1039124Monitor
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
MediumCVSS 6.1No exploitEPSS 0%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2019-1533124Monitor
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
MediumCVSS 6.1No exploitEPSS 0%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019
- CVE-2014-1038821Monitor
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.
MediumCVSS 5.3No exploitEPSS 1%wpsupportplus · wp support plus responsive ticket systemAug 22, 2019