https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13775.htmlhttps://patchthecve.com/cve/CVE-2024-13775.htmlWed, 17 Jun 2026 07:02:41 +0000MEDIUM 5.4: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajax_delete_message', 'ajax_get_customers_partial_list', and 'ajax_get_admins_list' functions in all versions up to, and including, 17.8. This makhttps://patchthecve.com/cve/CVE-2024-10627.htmlhttps://patchthecve.com/cve/CVE-2024-10627.htmlWed, 17 Jun 2026 06:56:04 +0000CRITICAL 9.8: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 17.7. This makes it possible for unauthenticated attackers to upload arbitrary https://patchthecve.com/cve/CVE-2024-10626.htmlhttps://patchthecve.com/cve/CVE-2024-10626.htmlWed, 17 Jun 2026 06:56:04 +0000HIGH 8.8: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for authenticated attackers, with Subscriber-level achttps://patchthecve.com/cve/CVE-2024-10625.htmlhttps://patchthecve.com/cve/CVE-2024-10625.htmlWed, 17 Jun 2026 06:56:04 +0000CRITICAL 9.8: The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unauthenticated attackers to delete arbitrary