Skip to content
Threat Feed
Subscribe

Product

Customer Support Ticket System & Helpdesk Plugin for WordPress <= 6.0.5

1 brief RSS
critical advisory

Critical Code Injection Vulnerability in WordPress Customer Support Ticket System & Helpdesk Plugin (CVE-2026-15011)

A critical code injection vulnerability, CVE-2026-15011, affects the Customer Support Ticket System & Helpdesk plugin for WordPress versions up to and including 6.0.5, allowing unauthenticated attackers to invoke arbitrary parameterless PHP functions via the 'path' parameter, potentially disrupting site functionality or exposing sensitive information without prior authentication.

Customer Support Ticket System & Helpdesk plugin for WordPress <= 6.0.5 code-injection wordpress web-application plugin-vulnerability php
1t 1c