The wp-support-plus-responsive-ticket-system plugin prior to 4.2 for WordPress has SQL injection.
wpsupportplus wp support plus responsive ticket system