Access violation vulnerability in KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin 1.7.4

The KB Support plugin, which is used for customer support and knowledge base management on WordPress websites, has a security vulnerability that could expose sensitive information. This includes any files attached to support tickets, which are stored in an insecure directory called ‘kbs’. This vulnerability exists in all versions of the plugin up to 1.7.4, allowing attackers to access this sensitive data without proper authentication. A partial fix was implemented in version 1.7.3.2.