Security Risk Category

cookie-forgery Security Risks

Published vulnerability pages connected to cookie-forgery. One risk can appear in multiple categories while keeping one canonical page.

cookie-forgery risks

Showing 1 of 1 published risks.

medium

WP Support Plus Responsive Ticket System Guest Cookie Forgery Vulnerability

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.

CVE-2026-11875wordpresssupport-ticketauthorization-bypasscookie-forgery

Updated Jul 10, 2026