CVE-2024-13568 HIGH

CVE-2024-13568: Fluent Support – Helpdesk & Customer Support Ticket System <= 1.8.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

Vendor Techjewel
Product Fluent Support – Helpdesk & Customer Support Ticket System
Weakness CWE-200 · Info exposure
Published March 1, 2025
Last update April 8, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets.

Key dates

02Disclosure timeline

March 1, 2025 CVE published
April 8, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-3104 WP Staging Pro <= 6.1.2 - Unauthenticated Information Exposure via getOutdatedPluginsRequest Function CVE-2026-32151 Windows Shell Information Disclosure Vulnerability CVE-2026-31869 Discourse: Composer mentions endpoint leaks hidden group membership through PM `allowed_names` check CVE-2023-46115 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli CVE-2025-20290 Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability