PT-2025-10076 · WordPress · Supportcandy

Tim Coen · Published 2025-03-07 · Updated 2025-03-08 · CVE-2024-13552

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress versions prior to 3.3.1

Description The issue allows authenticated attackers to download attachments for support tickets that do not belong to them due to missing validation on a user-controlled key. If an admin enables tickets for guests, this can be exploited by unauthenticated attackers.

Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue. As a temporary workaround, consider disabling the file upload feature until a patch is available. Restrict access to sensitive support tickets and attachments to minimize the risk of exploitation. Avoid enabling tickets for guests unless necessary, and implement additional access controls to mitigate the risk of unauthenticated attackers exploiting this issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2024-13552

Affected Products

Supportcandy

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-13552 · Security Note
• https://plugins.trac.wordpress.org/browser/supportcandy/trunk/includes/admin/tickets/class-wpsc-new-ticket.php#L395 · Note
• https://t.me/cvenotify/113802 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3235142/supportcandy/trunk?old=3188306&old_path=%2Fsupportcandy%2Ftrunk · Note
• https://t.me/cvedetector/19805 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1897996966014882084 · Twitter Post
• https://t.me/cvetracker/18666 · Telegram Post
• https://twitter.com/CVEnew/status/1898246381057315255 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/13f87248-cc0b-4351-b79d-6efc5190b021?source=cve · Note