Vulnerability Details CVE-2018-1000131
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site, without login. This vulnerability appears to have been fixed in 9.0.3 and later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/00theway/exp/blob/master/wordpress/wpsupportplus.md
- https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
- https://wpvulndb.com/vulnerabilities/9041
- https://github.com/00theway/exp/blob/master/wordpress/wpsupportplus.md
- https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
- https://wpvulndb.com/vulnerabilities/9041
Products affected by CVE-2018-1000131
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:1.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:2.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:2.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:2.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:2.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.6
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.7
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:3.9
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:4.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:4.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:4.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:4.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:4.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:5.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.6
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.7
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.8
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:6.1.9
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.6
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.7
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.8
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.0.9
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:7.1.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.2
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.3
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.4
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.5
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.6
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.7
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:8.0.8
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:9.0.0
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:9.0.1
-
cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:9.0.2