Support Ticket System Project vulnerabilities
We track 3 vulnerabilities in Support Ticket System Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2024.
Latest Support Ticket System Project vulnerabilities
- 9.8 Critical severity
WooCommerce Support Ticket System: Unrestricted Upload of File with Dangerous Type
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 17.7. This makes it possible for unauth
- 8.1 High severity
WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for authentic
- 9.1 Critical severity
WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unaut