WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
Strategic Overview
< 8.0.0N/AVulnerability Overview
The WP Support Plus Responsive Ticket System plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 7.1.4. This is due to the plugin only requiring a valid email for the loginGuestFacebook AJAX action which is passed to the wp_set_auth_cookie() function and will log the user in as the account associated with the supplied email. This makes it possible for unauthenticated attackers to log in as any users account, including administrators.
Technical Analysis
REMEDIATION: Update to version 8.0.0, or a newer patched version --- IDENTIFIER: CWE-288 (Authentication Bypass Using an Alternate Path or Channel) The product requires authentication, but the product has an alternate path or channel that does not require authentication.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C