CVE-2026-14931

The CVE-2026-14931 entry concerns the JS Help Desk WordPress plugin (pre-3.1.4). On activation it grants a support-agent capability to the Contributor role and fails a capability check on a user-listing handler, enabling Contributor-level users to enumerate the email addresses of all registered W...