Critical Code Injection Vulnerability in Customer Support Ticket System & Helpdesk Plugin for WordPress (CVE-2026-15011)
A critical vulnerability (CVE-2026-15011, CVSS score: 9.8) exists in the Customer Support Ticket System & Helpdesk plugin for WordPress, allowing unauthenticated attackers to inject arbitrary PHP code. This vulnerability affects all versions up to and including 6.0.5. Immediate action is required to prevent potential site disruption and data exposure.