SQL Injection Vulnerability in WP Support Plus Responsive Ticket System Plugin
CVE-2026-11590
Currently unrated
What is CVE-2026-11590?
The WP Support Plus Responsive Ticket System Plugin for WordPress has a vulnerability that allows unauthenticated users to execute SQL injection attacks. The plugin fails to properly sanitize user-supplied array keys prior to their inclusion in SQL statements, creating an opportunity for attackers to manipulate database queries. This can lead to unauthorized data access and potential compromise of sensitive information.
Affected Version(s)
WP Support Plus Responsive Ticket System 0 <= 9.1.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.