CVE-2026-15011— Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| emarket-design | Customer Support Ticket System & Helpdesk | ≤ 6.0.5 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15011
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation. This makes it possible for unauthenticated attackers to invoke arbitrary parameterless PHP functions, which can be used to disrupt site functionality or expose sensitive information. The required nonce is publicly emitted via wp_localize_script whenever the plugin's [emd_form] shortcode is rendered on any public-facing page, making the endpoint reachable by unauthenticated visitors without any prior authentication or privilege.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress Customer Support Ticket System & Helpdesk 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress Customer Support Ticket System & Helpdesk是WordPress基金会的一个客户支持工单系统。 WordPress Customer Support Ticket System & Helpdesk 6.0.5及之前版本存在代码注入漏洞，该漏洞源于对'path'参数使用动态函数调用且验证不足，可能导致未经身份验证的攻击者调用任意的无参PHP函数，从而破坏站点功能或泄露敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| emarket-design | Customer Support Ticket System & Helpdesk | 0 ~ 6.0.5 | - |
II. Public POCs for CVE-2026-15011
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15011
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-15011 (1)
Vendor Advisories for CVE-2026-15011 (1)
IV. Related Vulnerabilities
Same vendor: emarket-design
- CVE-2026-15790
Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cros - CVE-2026-14249
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code - CVE-2026-12923
Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitra - CVE-2026-9848
WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordP - CVE-2025-15636
WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scri
Same weakness: CWE-94
- CVE-2026-73992
WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Exec - CVE-2026-77077
n8n before 1.123.69 Remote Code Execution via EventEmitter P - CVE-2026-77075
n8n before 1.123.69 Expression Injection via Resource Locato - CVE-2026-77074
n8n before 1.123.69 SSRF via Edit Image Node - CVE-2026-76760
chenhg5 cc-connect webhook.go authenticate code injection
V. Comments for CVE-2026-15011
No comments yet