support_ticket_system vulnerabilities

3 known vulnerabilities in support_ticket_system from Support Ticket System Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WooCommerce Support Ticket System: Unrestricted Upload of File with Dangerous Type

  CVE-2024-10627Nov 9, 2024Vanquish

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 17.7. This makes it possible for unauth

• 8.1 High severity

  WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-10626Nov 9, 2024Vanquish

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for authentic

• 9.1 Critical severity

  WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-10625Nov 9, 2024VanquishEPSS 1.03%

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unaut