What is the CVSS score of CVE-2026-14929?

CVE-2026-14929 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2026-14929?

Yes, a public proof-of-concept exploit is available for CVE-2026-14929. Prioritise patching immediately. EPSS: 0.1%.

Is there a patch available for CVE-2026-14929?

Yes, a patch is available for CVE-2026-14929. Update the affected software to the latest version immediately.

JS Help Desk CVE-2026-14929

EUVD-2026-51422 MEDIUM

Incorrect Authorization (CWE-863)

2026-07-31 WPScan

GHSA-g256-5g3w-9rv9

WordPress Authentication Bypass Js Help Desk

4.3

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

Network-delivered IDOR requiring only a subscriber session; impact is strictly limited to overwriting reply content with no confidentiality or availability consequence.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 31, 2026 - 14:28 vuln.today

CVSS changed

Jul 31, 2026 - 14:22 NVD

4.3 (MEDIUM)

Patch available

Jul 31, 2026 - 07:01 EUVD

CVE Published

Jul 31, 2026 - 06:00 cve.org

MEDIUM 4.3

CVE Published

Jul 31, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.

AnalysisAI

Broken authorization in the JS Help Desk WordPress plugin (versions prior to 3.1.4) allows any authenticated user at Subscriber level or above to overwrite the content of any support-ticket reply site-wide, regardless of ownership. The plugin's reply-update endpoint fails to validate that the requesting user owns the targeted reply, enabling unauthorized content manipulation across all tickets. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Delivery

Enumerate support ticket reply IDs via normal plugin interaction

Exploit

Craft HTTP request targeting victim reply ID

Execution

Submit unauthorized update bypassing ownership check

Impact

Victim reply content overwritten with attacker-controlled text

Access

Delivery

Enumerate support ticket reply IDs via normal plugin interaction

Exploit

Craft HTTP request targeting victim reply ID

Execution

Submit unauthorized update bypassing ownership check

Impact

Victim reply content overwritten with attacker-controlled text

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid WordPress user account at Subscriber level or above - this is the minimum WordPress role assignable to registered users. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The NVD CVSS 3.1 base score is 4.3 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, reflecting low-complexity network exploitation requiring only a low-privilege account, with impact limited to integrity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker registers (or already holds) a Subscriber-level WordPress account on a target site running JS Help Desk prior to 3.1.4. Using a publicly available proof-of-concept, they submit a crafted HTTP POST request to the reply-update endpoint, supplying the numeric ID of a victim's support-ticket reply they do not own. …
Remediation	Update the JS Help Desk WordPress plugin to version 3.1.4 or later, which is confirmed by the vendor as the patched release. … Detailed patch versions, workarounds, and compensating controls in full report.