CVE-2025-14033

Name of the Vulnerable Software and Affected Versions ilGhera Support System for WooCommerce versions prior to 1.3.1

Description The ilGhera Support System for WooCommerce plugin for WordPress allows unauthorized access to data because the get ticket content callback() function lacks a capability check. Unauthenticated attackers can view support ticket content, including private communications and sensitive customer information, by providing a ticket ID.

Recommendations Update the plugin to a version later than 1.3.0. As a temporary workaround, restrict access to the get ticket content callback() function to minimize the risk of exploitation.