WooCommerce Support Ticket System vulnerabilities

4 known vulnerabilities in WooCommerce Support Ticket System from Vanquish. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-32522Mar 25, 2026Vanquish

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-system allows Path Traversal.This issue affects WooCommerce Support Ticket System: from n/a th

• 9.8 Critical severity

  WooCommerce Support Ticket System: Unrestricted Upload of File with Dangerous Type

  CVE-2024-10627Nov 9, 2024Vanquish

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 17.7. This makes it possible for unauth

• 8.1 High severity

  WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-10626Nov 9, 2024Vanquish

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for authentic

• 9.1 Critical severity

  WooCommerce Support Ticket System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-10625Nov 9, 2024VanquishEPSS 1.03%

  The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unaut