CVE-2025-57972: WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through 2.0.2.
Other sources
Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57972?
CVE-2025-57972 is classified as a medium severity vulnerability due to its impact on access control.
How do I fix CVE-2025-57972?
To fix CVE-2025-57972, update the Helpdesk Support Ticket System for WooCommerce to version 2.0.3 or later.
What is the nature of CVE-2025-57972?
CVE-2025-57972 is a missing authorization vulnerability that allows exploitation of incorrectly configured access control levels.
Which versions of the Helpdesk Support Ticket System for WooCommerce are affected by CVE-2025-57972?
CVE-2025-57972 affects all versions of the Helpdesk Support Ticket System for WooCommerce up to and including version 2.0.2.
Can CVE-2025-57972 lead to data exposure?
Yes, CVE-2025-57972 can potentially lead to unauthorized access and data exposure if not mitigated.