Skip to content
OpenAdvisories

Product · wpcodefactory

Helpdesk Support Ticket System for WooCommerce

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter

    The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it poss…