CVE-2016-11012

The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-09-20

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Sola Support Tickets (Solaplugins)

References

• https://wordpress.org/plugins/sola-support-tickets/#developers
• https://wpvulndb.com/vulnerabilities/8389