CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Object Injection.This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through <= 6.0.2.
Explanation of Vulnerability in Simple Terms
WP Ticket Customer Service Software & Support Ticket System versions 6.0.2 and earlier contain a deserialization vulnerability that allows unauthenticated attackers to run arbitrary code on the site. The vulnerability requires specific network conditions but does not require user interaction. Affected sites should update immediately to a version newer than 6.0.2.
What an attacker can do
Run arbitrary code on the site without authentication.
Potential impact on your site
Complete compromise of the site, including data theft, malware installation, and site takeover.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
