Low severity3.7NVD Advisory· Published Jul 31, 2026· Updated Aug 26, 2026

CVE-2026-14862

Description

The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket attachments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Support Genixllm-fuzzy
Range: <1.4.48

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/ef1c6fd5-e62c-4951-a0ba-0e61edb1e795/nvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000