PT-2026-1402 · WordPress · Ilghera Woocommerce Support System
CVE-2025-14034
·
Published
2026-01-06
·
Updated
2026-01-06
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
ilGhera Support System for WooCommerce plugin versions prior to 1.2.7
Description
The ilGhera Support System for WooCommerce plugin for WordPress has a flaw that allows unauthorized modification and data loss. A missing capability check in the
delete single ticket callback and change ticket status callback functions allows authenticated attackers with Subscriber-level access or higher to delete support tickets and change their status.Recommendations
Update the ilGhera Support System for WooCommerce plugin to version 1.2.7 or later.
Fix
LPE
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ilghera Woocommerce Support System