Threats tagged 'ghsa-pm33-j8g2-55v7'

CVE-2026-14930 is a high-severity vulnerability in the JS Help Desk WordPress plugin before version 3.1.4. It allows unauthenticated users to upload files and attach them to arbitrary users' support tickets due to missing authorization, nonce, or ownership checks on a front-end request dispatcher. The uploaded files are limited to the plugin's inert allowed extensions. This vulnerability does not affect confidentiality or availability but impacts data integrity by allowing unauthorized file attachments.