Skip to main content

JS Help Desk CVE-2026-14931

| EUVDEUVD-2026-51424 MEDIUM
Information Exposure (CWE-200)
2026-07-31 WPScan GHSA-4w98-gcq5-58rp
WordPress Information Disclosure Js Help Desk
6.5
CVSS 3.1 · Vendor: WPScan
Share

Severity by source

Vendor (WPScan) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vuln.today AI
6.5 MEDIUM

PR:L reflects required Contributor account; C:H for full user email roster exposure; I:N and A:N as no write or availability impact exists.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Analysis Generated
Jul 31, 2026 - 20:29 vuln.today
CVSS changed
Jul 31, 2026 - 20:22 NVD
6.5 (MEDIUM)
Patch available
Jul 31, 2026 - 07:01 EUVD
CVE Published
Jul 31, 2026 - 06:00 cve.org
MEDIUM 6.5
CVE Published
Jul 31, 2026 - 06:00 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

The JS Help Desk WordPress plugin before 3.1.4 grants a support-agent capability to the Contributor role on activation and does not perform a capability check on a user-listing handler, allowing Contributor-level users to enumerate the email addresses of all registered WordPress users.

AnalysisAI

User email enumeration in the JS Help Desk WordPress plugin (versions before 3.1.4) allows any Contributor-level site user to harvest the email addresses of all registered WordPress users. Two design flaws compound: the plugin unconditionally grants a support-agent capability to the built-in Contributor role at activation time, and the user-listing handler omits any capability check entirely, making the Contributor elevation the effective attack precondition. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Register or obtain Contributor account
Delivery
Activate plugin grants support-agent capability to Contributor role
Exploit
Call unprotected user-listing endpoint
Execution
Receive full registered user email list
Impact
Use emails for phishing or credential stuffing
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid Contributor-level (or higher) WordPress account on the target site. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The NVD-assigned CVSS 3.1 score of 6.5 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N is well-calibrated: network exploitability with low complexity and Contributor-level authentication yielding full confidentiality compromise of the user roster is accurately characterized as Medium-High. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker registers a free Contributor account on a WordPress site running the vulnerable plugin (or uses an existing Contributor credential) and directly invokes the unprotected user-listing endpoint - an AJAX action or REST route exposed by JS Help Desk. Because the plugin granted support-agent capability to Contributors at activation, the request passes any role gate, and the handler returns the full list of registered user email addresses with no further authentication required. …
Remediation Update the JS Help Desk WordPress plugin to version 3.1.4 or later, which is the vendor-released patch addressing both the improper support-agent capability grant at activation and the missing capability check on the user-listing handler. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Js Help Desk

View all
CVE-2023-50839 CRITICAL POC
9.3 Dec 28

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS He
CVE-2026-14930 HIGH POC
7.5 Jul 31

Unauthenticated file upload and arbitrary ticket attachment in JS Help Desk WordPress plugin (all versions before 3.1.4)
CVE-2026-14928 MEDIUM POC
6.5 Jul 31

JS Help Desk WordPress plugin before 3.1.4 exposes all support ticket content to any authenticated WordPress user due to
CVE-2026-15209 MEDIUM POC
6.5 Jul 31

Insecure Direct Object Reference (IDOR) in JS Help Desk WordPress plugin before 3.1.5 exposes support ticket data to any
CVE-2024-43274 CRITICAL
9.8 Nov 01

Missing Authorization vulnerability in JS Help Desk JS Help Desk - Best Help Desk & Support Plugin allows Accessing Func
CVE-2024-31273 CRITICAL
9.8 Jun 09

Missing Authorization vulnerability in JS Help Desk JS Help Desk - Best Help Desk & Support Plugin.8.3. Rated critical s
CVE-2026-48886 CRITICAL
9.3 Jun 15

SQL injection in the JS Help Desk WordPress plugin versions 3.0.9 and earlier allows remote unauthenticated attackers to
CVE-2022-47151 HIGH
8.6 Apr 17

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS He
CVE-2026-32534 HIGH
8.5 Mar 25

JoomSky JS Help Desk contains a blind SQL injection vulnerability in versions through 3.0.3 that allows attackers to exe
CVE-2026-14929 MEDIUM POC
4.3 Jul 31

Broken authorization in the JS Help Desk WordPress plugin (versions prior to 3.1.4) allows any authenticated user at Sub
CVE-2026-56054 HIGH
7.7 Jun 25

Arbitrary file deletion in the JS Help Desk (JS Support Ticket) WordPress plugin versions 3.1.1 and earlier lets a low-p
CVE-2024-13606 HIGH
7.5 Feb 13

The JS Help Desk - The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information E

Same weakness CWE-200 – Information Exposure

View all
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2016-2388 MEDIUM POC
5.3
CVE-2016-1561 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2023-4966 HIGH POC
7.5

Share

CVE-2026-14931 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy