{"id":"CVE-2024-44011","aliases":["EUVD-2024-40793","GHSA-rqf2-4423-rffc"],"status":"published","title":"WordPress WP Ticket Ultra plugin \u003c= 1.0.5 - Local File Inclusion vulnerability","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk \u0026 Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk \u0026 Support Plugin: from n/a through \u003c= 1.0.5.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00557,"percentile":0.46944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-10-05T10:33:04Z","modified":"2026-06-17T07:52:09Z","products":[{"vendor":"expresstech systems","product":"wp ticket ultra help desk \u0026 support plugin"},{"vendor":"wp ticket ultra","product":"wp ticket ultra help desk \u0026 support plugin"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/wp-ticket-ultra/vulnerability/wordpress-wp-ticket-ultra-plugin-1-0-5-local-file-inclusion-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44011"},{"url":"https://patchstack.com/database/vulnerability/wp-ticket-ultra/wordpress-wp-ticket-ultra-plugin-1-0-5-local-file-inclusion-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-rqf2-4423-rffc"}],"sources":{"cve":[{"id":"CVE-2024-44011","title":"WordPress WP Ticket Ultra plugin \u003c= 1.0.5 - Local File Inclusion vulnerability","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk \u0026 Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk \u0026 Support Plugin: from n/a through \u003c= 1.0.5.","status":"published","published":"2024-10-05T10:33:04.458Z","modified":"2026-04-28T16:10:16.312Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-40793","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk \u0026 Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk \u0026 Support Plugin: from n/a through \u003c= 1.0.5.","status":"published","published":"2024-10-05T10:33:04Z","modified":"2026-04-28T16:10:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:06:00.086132Z"}],"ghsa":[{"id":"GHSA-rqf2-4423-rffc","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Ticket Ultra WP Ticket Ultra Help Desk \u0026 Support Plugin allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk \u0026 Support Plugin: from n/a through 1.0.5.","status":"published","published":"2024-10-05T12:31:33Z","modified":"2026-04-01T18:33:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:07:00.41499Z"}],"nvd":[{"id":"CVE-2024-44011","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk \u0026 Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk \u0026 Support Plugin: from n/a through \u003c= 1.0.5.","status":"published","published":"2024-10-05T11:15:11.05Z","modified":"2026-06-17T07:52:09.317Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:30.673028Z"}]}}