Threats tagged 'ghsa-rr3h-2v3g-4rp9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-15209JS Help Desk (WordPress plugin) · Insecure Direct Object Reference Medium6.5EPSS 0.3%2026-07-31CVE Database V5CVE-2026-15209 A vulnerability in the JS Help Desk WordPress plugin before version 3.1.5 allows a low-privileged authenticated user to access another user's ticket by supplying the ticket ID. This flaw results from missing verification that the requesting user owns the ticket being loaded, exposing sensitive information such as personally identifiable information (PII) and message contents. EPSS 0.3%Vulnerability CWE-639 #ghsa-rr3h-2v3g-4rp9	CVE Database V5	2026-07-31

Page 1 of 1