CVE-2026-11399

MediumCVSS 4.3

Published: 03/10/2026(UTC)Updated: 03/10/2026(UTC)Translated: 03/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter. An authenticated attacker with subscriber-level access or above can delete arbitrary ticket responses belonging to other users by supplying any stsw_responses row ID.

Risk Assessment

A low-privileged attacker can destroy other users' data in the ticketing system, leading to data loss and disruption of customer support. It requires only a valid subscriber account.

Recommendation

Update the plugin to a version newer than 2.1.6 as soon as available, and in the meantime restrict subscriber account registration and monitor unusual response deletion activity.

Other vulnerabilities in Helpdesk Support Ticket System for WooCommerce

CVE-2025-57972Medium
The Helpdesk Support Ticket System for WooCommerce plugin by WPFactory is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 2.1.1.

Original NVD description (English source)

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary ticket responses belonging to other users by supplying any stsw_responses row ID to the deletion handler after obtaining the nonce from the admin footer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS