13 matches found
EUVD-2022-32340
Malicious code in bioql PyPI...
CVE-2024-13604 KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
The KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.4 via the 'kbs' directory. This makes it possible for unauthenticated attackers to extract sensitive dat...
PT-2025-15048 · WordPress · The Kb Support – Customer Support Ticket & Helpdesk Plugin
Name of the Vulnerable Software and Affected Versions: The KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress versions up to, and including, 1.7.4 Description: The issue allows unauthenticated attackers to extract sensitive data stored insecurely in...
CVE-2025-24741 WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in LOGON KB Support kb-support.This issue affects KB Support: from n/a through = 1.6.7...
CVE-2025-24741 WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in KB Support KB Support. This issue affects KB Support: from n/a through 1.6.7...
CVE-2024-8632
The WordPress KB Support plugin (KB Support – WordPress Help Desk and Knowledge Base) is vulnerable due to a missing capability check on kbs_ajax_load_front_end_replies and kbs_ajax_mark_reply_as_read. Affected versions: all up to 1.6.6. The issue allows unauthenticated attackers to read replies ...
PT-2024-39087 · WordPress · The Kb Support – Wordpress Help Desk/Knowledge Base
Name of the Vulnerable Software and Affected Versions: The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress versions up to, and including, 1.6.6 Description: The issue is related to a missing capability check on several functions, allowing authenticated attackers with...
WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin KB Support versions = 1.6.0...
CVE-2023-37890 WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control
Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Desk and Knowledge...
CVE-2023-25983 WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84...
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
WordPress plugin KB Support 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...