rcatheme

Products

ProductCVEsExploitedLatest
Guest Support2–Dec 12, 2025

Exploited and recent CVEs

  • CVE-2025-13660 Medium 5.3 Guest Support <= 1.2.3 - Unauthenticated User Email Disclosure in guest_support_handler AJAX Endpoint 0.3%
  • CVE-2025-5957 Medium 5.3 Guest Support – Complete customer support ticket system for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Ticket Deletion 0.3%