Description
WordPress Plugin WP Support Plus Responsive Ticket System is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin WP Support Plus Responsive Ticket System version 7.1.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 8.0.0 or latest
References
http://security.szurek.pl/wp-support-plus-responsive-ticket-system-713-privilege-escalation.html
Related Vulnerabilities
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.69)
Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (2.5.0 - 3.9.1)
WordPress Plugin The Guardian News Feed Cross-Site Request Forgery (0.4)
OpenSSL Uncontrolled Recursion Vulnerability (CVE-2018-0739)
WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.18)