Description
WordPress Plugin WP Support Plus Responsive Ticket System is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions; other attacks are also possible. WordPress Plugin WP Support Plus Responsive Ticket System version 7.1.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 8.0.0 or latest
References
http://security.szurek.pl/wp-support-plus-responsive-ticket-system-713-privilege-escalation.html
Related Vulnerabilities
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.8.9.5)
WordPress Plugin Student Result or Employee Database Security Bypass (1.6.3)
WordPress Plugin XforWooCommerce Security Bypass (1.6.4)
XWikiplatform Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-31985)
WordPress Plugin Media Library Assistant Multiple Vulnerabilities (2.65)