CVE-2026-15209
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body.
| Vendor | unknown |
| Product | js help desk |
| Published | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown js help desk
Be the first to know when new unknown vulnerabilities affecting unknown js help desk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / JS Help Desk
0 < 3.1.5
References
Credits
Sai Praneeth Koti WPScan