CVE-2026-14862

Support Genix Lite (WordPress plugin) is affected by CVE-2026-14862: versions before 1.4.48 allow unauthenticated users who know a stored attachment filename to download private ticket attachments due to missing authorization. The vulnerability arises in the attachment download path, enabling acc...