Filtered by vendor Ilghera Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-14034 3 Ilghera, Woocommerce, Wordpress 3 Woocommerce Support System, Woocommerce, Wordpress 2026-01-06 5.3 Medium
The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'delete_single_ticket_callback' and 'change_ticket_status_callback' functions in all versions up to, and including, 1.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary support tickets and modify their status.
CVE-2023-41686 2 Ilghera, Wordpress 2 Woocommerce Support System, Wordpress 2025-07-12 6.5 Medium
Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2.
CVE-2024-13521 1 Ilghera 1 Mailup Auto Subscription 2025-01-30 6.1 Medium
The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the mas_options function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2023-41685 1 Ilghera 1 Woocommerce Support System 2024-11-21 9.8 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1.