CVE-2026-11875

Description

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner (identified by email address) to read, reply to, and close that person's support tickets.

PUBLISHED Reserved 2026-06-10 | Published 2026-07-09 | Updated 2026-07-09 | Assigner WPScan

Problem types

CWE-639 Authorization Bypass Through User-Controlled Key

Product status

Credits

Kartik sharma finder

WPScan coordinator

References

wpscan.com/...rability/1c69692e-5d0c-42cf-9b3d-b722f2ba4231/ exploit vdb-entry technical-description

cve.org (CVE-2026-11875)

nvd.nist.gov (CVE-2026-11875)

Download JSON