Majestic Support
Monthly
Information disclosure in Majestic Support versions 1.1.2 and below allows unauthenticated remote attackers to bypass authorization checks and view restricted data. The missing authorization flaw (CWE-862) has a CVSS 5.3 base score, with low confidentiality impact and no privilege escalation or system compromise. No active exploitation or public proof-of-concept is known, and EPSS predicts only a 0.02% chance of exploitation in the wild.
The Majestic Support - The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.
The Majestic Support - The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information disclosure in Majestic Support versions 1.1.2 and below allows unauthenticated remote attackers to bypass authorization checks and view restricted data. The missing authorization flaw (CWE-862) has a CVSS 5.3 base score, with low confidentiality impact and no privilege escalation or system compromise. No active exploitation or public proof-of-concept is known, and EPSS predicts only a 0.02% chance of exploitation in the wild.
The Majestic Support - The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.
The Majestic Support - The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.