Yds Support Ticket System Vulnerabilities

The YDS Support Ticket System plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level...

CVSS:

6.5

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Dec 14, 2024

CVE-2024-55985 on NVD →

The YDS Support Ticket System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on various functions. This makes it possible for unauthenticated attackers to create user tickets, and perform other actions, via for...

CVSS:

8.8

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Sep 12, 2022

CVE-2022-36388 on NVD →