Unknown Wp Support Plus Responsive Ticket System vulnerabilities

3 CVEs affecting Unknown Wp Support Plus Responsive Ticket System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11875, published 2026-07-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-11589, published 2026-06-30. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript…
CVE-2026-11590, published 2026-06-30. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform…
CVE-2026-11875, published 2026-07-09. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket…