Support Genix
Monthly
Directory traversal in Support Genix WordPress plugin before 1.4.48 exposes arbitrary server files to unauthenticated remote attackers via the ticket-attachment download route. Exploitation is constrained to files matching an allowlisted extension set, yet this still enables disclosure of other users' private ticket attachments and any other allowlisted-extension files accessible to the web server process. A publicly available proof-of-concept exists per WPScan, though EPSS sits at only 0.25% (17th percentile), indicating low observed exploitation pressure despite the low attack complexity.
Missing authorization on attachment download endpoints in the Support Genix WordPress plugin (before 1.4.48) exposes private support ticket files to unauthenticated network access. Any caller who possesses a stored attachment's filename can retrieve it directly, bypassing ticket ownership and login checks entirely. A publicly available exploit exists per WPScan, though EPSS sits at 0.14% (4th percentile), indicating no widespread opportunistic exploitation at time of analysis; no CISA KEV listing.
Directory traversal in Support Genix WordPress plugin before 1.4.48 exposes arbitrary server files to unauthenticated remote attackers via the ticket-attachment download route. Exploitation is constrained to files matching an allowlisted extension set, yet this still enables disclosure of other users' private ticket attachments and any other allowlisted-extension files accessible to the web server process. A publicly available proof-of-concept exists per WPScan, though EPSS sits at only 0.25% (17th percentile), indicating low observed exploitation pressure despite the low attack complexity.
Missing authorization on attachment download endpoints in the Support Genix WordPress plugin (before 1.4.48) exposes private support ticket files to unauthenticated network access. Any caller who possesses a stored attachment's filename can retrieve it directly, bypassing ticket ownership and login checks entirely. A publicly available exploit exists per WPScan, though EPSS sits at 0.14% (4th percentile), indicating no widespread opportunistic exploitation at time of analysis; no CISA KEV listing.