What the vulnerability does
01Description
The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the /includes/ajax-functions.php file all versions up to, and including, 1.6.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbitrary tickets, updating the status of any post, deleting any post, adding notes to tickets, flagging or unflagging tickets, and adding or removing ticket participants.
Explanation of Vulnerability in Simple Terms
02Summary
The KB Support plugin for WordPress fails to properly check user permissions before allowing access to sensitive support ticket and knowledge base data. A logged-in user with low privileges can read, modify, or delete tickets and knowledge base entries belonging to other users or the organization. This affects all versions up to 1.6.6.
What an attacker can do
03Attacker Capabilities
Read, modify, or delete support tickets and knowledge base entries belonging to other users.
Potential impact on your site
04Site Impact
Customer support data and knowledge base content can be accessed or altered by unauthorized users, compromising confidentiality and data integrity.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
06Disclosure timeline
October 1, 2024
CVE published
April 8, 2026
Record updated
