Skip to content
OpenAdvisories
High · 8.6 CVE-2026-32522 EUVD-2026-15886GHSA-9gpq-ggj7-crmm

WordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-system allows Path Traversal.This issue affects WooCommerce Support Ticket System: from n/a through < 18.5.

Affected products

VendorProductAffectedFixed
vanquish WooCommerce Support Ticket System ≤ < 18.5 —

References