Wc Support System Vulnerabilities

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_content_callback' function in all versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to view any support ticket conten...

CVSS:

5.3

Affected:

up to 1.3.0

Fixed in:

1.3.1

Disclosed:

May 12, 2026

CVE-2025-14033 on NVD →

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'delete_single_ticket_callback' and 'change_ticket_status_callback' functions in all versions up to, and including, 1.2.6. This makes it possible for authe...

CVSS:

5.3

Affected:

up to 1.2.6

Fixed in:

1.2.7

Disclosed:

Jan 5, 2026

CVE-2025-14034 on NVD →

The Woocommerce Support System plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on several functions hook via 'init', 'admin_init', and AJAX actions in versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

CVSS:

7.3

Affected:

up to 1.2.2

Fixed in:

1.2.3

Disclosed:

Sep 4, 2023

CVE-2023-41686 on NVD →

The Woocommerce Support System plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attac...

CVSS:

7.2

Affected:

up to 1.2.1

Fixed in:

1.2.2

Disclosed:

Sep 4, 2023

CVE-2023-41685 on NVD →