Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in YDS Support Ticket System 1.0

  • Severity: medium-risk
  • Status: Open
  • Publication: December 14, 2024

The YDS Support Ticket System plugin for WordPress is not secure. It has a vulnerability called SQL Injection, which means that attackers can access sensitive information from the database. This can happen because the plugin does not properly protect against attacks and does not properly prepare the information before sending it to the database. This vulnerability affects all versions of the plugin, up to and including version 1.0. This means that even users with basic access to the plugin can potentially cause harm.

Detected in:

YDS Support Ticket System open vulnerable versions: >= * <= 1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.