Vulnerability CVE-2024-8632
Published: 2024-10-01

Description:
The KB Support ?? WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbs_ajax_load_front_end_replies' and 'kbs_ajax_mark_reply_as_read' functions in all versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to read replies of any ticket, and mark any reply as read.

Type:

CWE-862

 (Missing Authorization)

 References:
https://www.wordfence.com/threat-intel/vulnerabilities/id/767b1234-5b4a-4baa-9048-7b2e413cdba5?source=cve
https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L342
https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L439
Copyright 2026, cxsecurity.com

 

Back to Top