High severity7.5NVD Advisory· Published Mar 1, 2025· Updated Apr 8, 2026

CVE-2024-13568

Description

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpmanageninja/Fluent Support
cpe:2.3:a:wpmanageninja:fluent_support:*:*:*:*:*:wordpress:*:*
Range: <1.8.6
WordPress/Fluent Supportllm-fuzzy
Range: <=1.8.5
Package: https://wordpress.org/plugins/fluent-support

Patches

Vulnerability mechanics

References

www.wordfence.com/threat-intel/vulnerabilities/id/17f40832-8ae5-443a-aa98-f0e61d1152ccnvdThird Party Advisory
plugins.trac.wordpress.org/changeset/3248479/fluent-support/tags/1.8.6/app/Services/Includes/FileSystem.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000