Support Genix
by WordPress
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-49742 | Cri | 0.64 | 9.9 | 0.01 | Apr 18, 2024 | Missing Authorization vulnerability in Support Genix.This issue affects Support Genix: from n/a through 1.2.3. | ||
| CVE-2026-15932 | Med | 0.34 | 5.3 | 0.00 | Aug 1, 2026 | The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other users' private ticket attachments — from… | ||
| CVE-2026-14862 | Low | 0.24 | 3.7 | 0.00 | Jul 31, 2026 | The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket attachments. |
- risk 0.64cvss 9.9epss 0.01
Missing Authorization vulnerability in Support Genix.This issue affects Support Genix: from n/a through 1.2.3.
- risk 0.34cvss 5.3epss 0.00
The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other users' private ticket attachments — from…
- risk 0.24cvss 3.7epss 0.00
The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket attachments.