Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in KB Support – WordPress Help Desk 1.5.88

  • Severity: medium-risk
  • Status: Open
  • Publication: July 11, 2023

The KB Support plugin for WordPress is vulnerable to a security risk which can potentially allow attackers with certain permissions to access sensitive information about customers. This includes their names, emails, and phone numbers. The vulnerability only affects versions up to and including 1.5.88 and is due to the lack of a capability check in the kbs_ajax_get_customer_data function.

Detected in:

KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin fixed vulnerable versions:
KB Support – WordPress Help Desk and Knowledge Base fixed vulnerable versions:
KB Support – WordPress Help Desk open vulnerable versions: >= * <= 1.5.88

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.