CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.1.
Explanation of Vulnerability in Simple Terms
The Helpdesk Support Ticket System for WooCommerce plugin does not properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability affects versions up to 2.1.1. Site owners should update to a version newer than 2.1.1 to resolve this issue.
What an attacker can do
A logged-in user can modify data they lack authorization to change.
Potential impact on your site
Unauthorized users may alter ticket data, settings, or other protected information within the helpdesk system.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
