ilGhera Support System for WooCommerce

ilGhera Support System for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Authorization Bypass Through User-Controlled Key, SQL Injection.

Every one of the 4 issues recorded for ilGhera Support System for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Kévin Mosbahi (Mika). ilGhera Support System for WooCommerce is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ilGhera Support System for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-41686

Woocommerce Support System <= 1.2.2 - Missing Authorization

Read the full analysis

Vulnerability Records

4 records


2026-05-12 17:11	ilGhera Support System for WooCommerce <= 1.3.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure ilGhera Support System for WooCommerce <= 1.3.0	`CVE-2025-14033`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2026-01-05 15:05	ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion ilGhera Support System for WooCommerce <= 1.2.6	`CVE-2025-14034`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2023-09-04 00:00	Woocommerce Support System <= 1.2.2 - Missing Authorization ilGhera Support System for WooCommerce <= 1.2.2	`CVE-2023-41686`	7.3 High	Kévin Mosbahi (Mika)	Yes
2023-09-04 00:00	Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby' ilGhera Support System for WooCommerce <= 1.2.1	`CVE-2023-41685`	7.2 High	Kévin Mosbahi (Mika)	Yes

Showing 1–4 of 4 reports

Latestv1.3.3

ilGhera Support System for WooCommerce

Author

ilGhera

5.0(3)

100/100

Last Updated

2026-08-22 (22d ago)

Active Installs

60+

Downloads

11,115

Requires WP

5.0+

Requires PHP

Tested up to

WP 7.1

Created

2018-04-04 (9y ago)

Requires Plugins

woocommerce

Customer care is a very important part of our online store and a support service is essential to bring our e-commerce to the next level. ilGhera Support System for WooCommerce integrates into your WordPress site a simple and fast support system, which will allow your users to open ticket assistance for WooCommerce products purchased, then receiving a notification when a reply is published. The ability to update the ticket with new messages, allows you to keep the logical thread of the conversation, making more productive your work and facilitating the user. Functionlities Select a page or create a new one for adding the support service in front-end Chose if insert the tickets table before or after the page content Customize the colors for admin and users threads. Send notifications to admin and users Support service for not logged in users (Premium) Auto-close tickets after a specified period of time (Premium)

View on WordPress.org