CVE-2024-44011: WordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through <= 1.0.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44011?
CVE-2024-44011 is considered a critical severity vulnerability due to its potential for local file inclusion.
How do I fix CVE-2024-44011?
To mitigate CVE-2024-44011, it is recommended to update the WP Ticket Ultra Help Desk & Support Plugin to a version higher than 1.0.5.
What types of attacks can CVE-2024-44011 facilitate?
CVE-2024-44011 can facilitate PHP Local File Inclusion attacks, allowing an attacker to access unauthorized files on the server.
Which versions of WP Ticket Ultra Help Desk & Support Plugin are affected by CVE-2024-44011?
CVE-2024-44011 affects all versions of the WP Ticket Ultra Help Desk & Support Plugin up to and including version 1.0.5.
What are the implications of exploiting CVE-2024-44011?
Exploiting CVE-2024-44011 can lead to unauthorized access to sensitive information on the server, posing a significant security risk.