| Package | Affected versions | Patched versions |
|---|---|---|
| ruby help desk | < 1.3.4 | 1.3.4 |
The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free