Known vulnerabilities in Customer Support Ticket System & Helpdesk

Let customers submit tickets, assign agents, set priorities, track status, and get instant email notifications. All from your website.

6Reported vulnerabilities

9.8Highest CVSS score

6.0.6Latest version

400+Active installs

What to do now

Update Customer Support Ticket System & Helpdesk to 6.0.6 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-15011	Critical 9.8	0.5%	0 to 6.0.5 (inclusive)	`6.0.6`	July 23, 2026
CVE-2021-24622	Medium 4.8	0.6%	Before 5.10.4	`5.10.4`	October 18, 2021
CVE-2025-53584	High 8.1	0.3%	6.0.2 and earlier	`6.0.3`	August 25, 2025
CVE-2026-9848	High 7.5	0.7%	0 to 6.0.4 (inclusive)	`6.0.5`	June 13, 2026
CVE-2025-60157	Medium 6.4	0.2%	6.0.2 and earlier	`6.0.3`	September 26, 2025
WF-b27338c7-2fbc-4985-a25e-8e2a9fdef8c3	Medium 4.4	—	Before 5.13	`5.13`	June 22, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.