Guest Support – Customer Support Ticket System Without Login
Guest Support – Customer Support Ticket System Without Login has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Guest Support – Customer Support Ticket System Without Login has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Guest Support – Customer Support Ticket System Without Login is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-13660Guest Support <= 1.2.3 - Unauthenticated User Email Disclosure in guest_support_handler AJAX Endpoint
Read the full analysisVulnerability Records

Guest Support – Customer Support Ticket System Without Login
Author
RcaTheme.com
Guest Support is a WordPress customer support ticket system and help desk that lets customers create and reply to support tickets without creating an account or logging in. Make it easier for customers to contact your support team. They can submit a support ticket, receive a private ticket link by email, and continue the conversation from that link without needing a WordPress account. Your support agents can also view and reply to tickets without logging in. How it works Customer submits a support ticket from your website. A unique ticket link is generated and sent to the customer and support agent by email. The customer can use the ticket link to view and reply to the ticket without login or registration. The support agent can use the same ticket system to reply and manage the conversation. The ticket can be closed or reopened according to your settings. This gives your customers a simple support experience: Submit a ticket → Receive a private link → Reply to the conversation → Get support Why Guest Support? Many customer support systems require customers to create an account before they can submit or manage a support ticket. Guest Support removes that extra step. Customers do not need to: Create a WordPress account Create or remember another password Log in before contacting support Use a customer dashboard just to ask for help This makes Guest Support useful for websites that want a simple and frictionless customer support process. Perfect for WooCommerce stores Online stores and businesses Freelancers and agencies Digital product websites Service-based businesses Membership websites Websites that do not require customer accounts Any WordPress website that needs a support ticket system without login Customer support ticket features Guest Support gives you the tools to manage customer support directly from WordPress. Create support tickets without login or registration Reply to tickets without login or registration Unique ticket links for accessing individual tickets Email notifications when tickets are created or replied to Allow customers and agents to close tickets Allow customers and agents to reopen tickets when enabled Allow customers to see their other submitted tickets from the ticket view Upload file attachments with configurable file limits and allowed file types Google reCAPTCHA protection for support forms Optional email verification with OTP Internal email validation for invalid, fake, mistyped, and disposable email addresses Ticket management Manage customer support tickets from your WordPress dashboard. View all support tickets Search tickets by ticket ID, subject, or email address Filter tickets by status and department Sort tickets by created date or last reply date Manage ticket statuses such as Open, Pending, and Closed Organize tickets using support departments Support departments Create support departments and send new tickets to the appropriate support team. Create, edit, and delete departments Assign support agents to departments Show or hide the department field on support forms Send email notifications to assigned agents and additional email addresses Assign departments to different support forms Custom support forms Create support ticket forms for different pages, products, services, or departments. Create multiple support forms Use a dedicated shortcode for each form Add custom fields to your support forms Reorder fields Arrange fields in 1, 2, or 3 columns Customize button text Add custom CSS classes Enable or disable file uploads Enable or disable reCAPTCHA Enable or disable email verification Available custom field types include: Textbox Email Number Textarea Dropdown / Select Radio Group Checkbox Group Hidden Date Picker Date and Time Picker Content with HTML You can also configure custom fields to require login when collecting information that should only be visible to authenticated users. Email notifications and templates Keep customers and support agents informed with customizable email notifications. Email templates are available for: New ticket notifications New ticket notifications for support agents Ticket reply notifications Ticket closing notifications Automatic ticket closure notifications OTP verification emails New user account notifications Email templates support placeholders so you can customize the content and include ticket information. Email delivery Guest Support supports: WordPress default email delivery Dedicated SMTP settings for Guest Support Using dedicated SMTP settings can help you configure email delivery separately for your support ticket system. Automatic ticket management With the Pro Addon, you can automate ticket management based on inactivity. Send a reminder before automatically closing a ticket Automatically close tickets after a configured number of days Send a notification after a ticket is automatically closed Guest ticket access Guest Support is designed so customers can access their support tickets without creating WordPress accounts. When a ticket is created, Guest Support generates a unique ticket URL containing randomly generated identifiers. The ticket link is sent by email to the ticket submitter and support agent. Access to the ticket is verified using the unique identifiers associated with the ticket. This allows you to provide guest customer support without requiring user registration or login. Free and Pro The free version provides the core guest support ticket system, including guest ticket submission, guest replies, ticket management, departments, forms, email notifications, attachments, and other essential support features. The Pro Addon adds advanced functionality such as additional departments and forms, custom fields, email verification, automation, frontend agent features, and more. Links Pro Addon Documentation Contact Support Shortcodes Submit Ticket Form [guest-support view=form id=1] View Single Ticket [guest-support view=ticket] View Ticket List [guest-support view=tickets] The ticket list shortcode requires the Pro Addon. What makes Guest Support different? The main difference is simple: Your customers can use a complete support ticket system without creating an account or logging in. If you want to provide customer support tickets, help desk functionality, and ticket-based support in WordPress without forcing customers to register, Guest Support gives you a simple way to do it. Support your customers without making them register Give customers an easier way to contact your support team. Install Guest Support and start accepting customer support tickets without login or registration. Third-Party Services This plugin uses Google reCAPTCHA to enhance security by preventing spam and abuse on the support ticket submission forms. Data Transmission When Google reCAPTCHA is enabled, user interaction data with the reCAPTCHA may be transmitted to Google for verification purposes. Please note that no data from the actual support ticket forms is sent to Google. Optional Usage Google reCAPTCHA is an optional feature. If you do not wish to use it, you can disable it within the plugin settings. Links to Google reCAPTCHA Service – Google reCAPTCHA – Google Terms of Service – Google Privacy Policy Please review these terms and policies to understand how your interaction data with Google reCAPTCHA is handled. By enabling and using Google reCAPTCHA, you agree to these terms.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C