Vulnerability Bulletins

CVE-2026-11590

   
Affected software WORDPRESS
 
The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-supplied array keys before using them in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-11590