Medium severity5.3NVD Advisory· Published Aug 1, 2026· Updated Aug 26, 2026
CVE-2026-15932
CVE-2026-15932
Description
The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other users' private ticket attachments — from the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.4.48
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.