Threats tagged 'ghsa-4w98-gcq5-58rp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-14931JS Help Desk (WordPress plugin) · Information Exposure Medium6.5EPSS 0.4%2026-07-31CVE Database V5CVE-2026-14931 A vulnerability in the JS Help Desk WordPress plugin before version 3.1.4 allows users with Contributor-level permissions to enumerate the email addresses of all registered WordPress users. This occurs because the plugin grants support-agent capabilities to Contributors on activation and fails to check user capabilities properly in a user-listing handler. EPSS 0.4%Vulnerability CWE-200 #ghsa-4w98-gcq5-58rp	CVE Database V5	2026-07-31

Page 1 of 1