Beveiligingsadvies

CVE-2025-5957

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-08 04:22:59
Laatst bijgewerkt 2026-04-08 17:33:39
Toegewezen door Wordfence
CVSS-score 5.3
Status PUBLISHED

Beschrijving

The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteMassTickets' function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to delete arbitrary support tickets.