CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.2.
Explanation of Vulnerability in Simple Terms
The Helpdesk Support Ticket System for WooCommerce plugin does not properly check user permissions before allowing access to sensitive ticket data. An unauthenticated attacker can read support tickets and their contents without logging in or having any account. This affects all versions up to 2.1.2.
What an attacker can do
Read support tickets and their contents without authentication.
Potential impact on your site
Customer support tickets containing sensitive information are exposed to anyone on the internet.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
