CVE-2015-7670

CRITICAL 9.8CVE-2015-7670 · Published 26/09/2017 · updated 17/06/2026

In short

CVE-2015-7670 is a CRITICAL (CVSS 9.8) vulnerability affecting support ticket system (support ticket system project).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
support ticket system support_ticket_system_project	`≤ 1.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.

References

securityfocus.com/archive/1/536624/100/0/threaded
wordpress.org/plugins/simple-support-ticket-system · Release Notes
wpvulndb.com/vulnerabilities/8207 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free