CVE-2026-11875
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The WP Support Plus Responsive Ticket System WordPress plugin through version 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.
Risk Assessment
The organization is exposed to unauthorized access to sensitive support tickets, potentially leading to customer data leakage, privacy breaches, and manipulation of ticket history.
Recommendation
Immediately update the WP Support Plus Responsive Ticket System plugin to the latest available version that includes a security fix, or replace it with an alternative solution if no patch is available.
Other vulnerabilities in WP Support Plus Responsive Ticket System
See all- CVE-2026-11590High
The WP Support Plus Responsive Ticket System WordPress plugin up to version 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
- CVE-2026-11589High
The WP Support Plus Responsive Ticket System WordPress plugin through version 9.1.2 fails to properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored Cross-Site Scripting attacks against site users and administrators.
Original NVD description (English source)
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.