Helpdesk Support Ticket System for WooCommerce

Helpdesk Support Ticket System for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Helpdesk Support Ticket System for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-60235

Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2026-03-23 00:00	Helpdesk Support Ticket System for WooCommerce <= 2.1.2 - Missing Authorization Helpdesk Support Ticket System… <= 2.1.2	`CVE-2026-23977`	5.3 Medium	daroo	Yes
2025-09-22 00:00	Helpdesk Support Ticket System for WooCommerce <= 2.1.1 - Missing Authorization Helpdesk Support Ticket System… <= 2.1.1	`CVE-2025-57972`	5.4 Medium	Nabil Irawan	Yes
2025-07-11 00:00	Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload Support Ticket System for WooCommerce <= 2.1.0	`CVE-2025-60235`	9.8 Critical	0xd4rk5id3	No

Showing 1–3 of 3 reports