Security Risk Category

support-ticket Security Risks

Published vulnerability pages connected to support-ticket. One risk can appear in multiple categories while keeping one canonical page.

support-ticket risks

Showing 1 of 1 published risks.

medium

WP Support Plus Responsive Ticket System Guest Cookie Forgery Vulnerability

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.

CVE-2026-11875wordpresssupport-ticketauthorization-bypasscookie-forgery

Updated Jul 10, 2026