The WP Ticket Ultra Help Desk & Support Plugin for WordPress suffers from an improper limitation of pathname to a restricted directory, enabling path traversal attacks. This flaw allows an attacker to include local files via PHP, potentially leading to remote code execution or disclosure of sensitive files. The vulnerability affects versions up to and including 1.0.5. The CVSS v3.1 base score is 7.5, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation of this vulnerability can lead to local file inclusion, which may allow attackers to read sensitive files, execute arbitrary code, or disrupt service. The CVSS score of 7.5 indicates a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using the affected plugin version or restrict access to the plugin functionality to trusted users only. Monitor vendor channels for updates.