Description
WordPress Plugin WP Support Plus Responsive Ticket System is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin WP Support Plus Responsive Ticket System version 7.1.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 8.0.0 or latest
References
http://security.szurek.pl/wp-support-plus-responsive-ticket-system-713-privilege-escalation.html
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5335)
WordPress Plugin Apocalypse Meow Security Bypass (21.2.7)
Ruby Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-28965)
WordPress Plugin pootle button Cross-Site Scripting (1.1.1)
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (7.6.0)