Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2023-25983

WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Kbsupport Logon
Products
Kb Support Kb Support
CVE-2024-33589

WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Logon
Products
Kb Support
CVE-2023-37890

WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control

Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Desk and Knowledge Base: from n/a through 1.5.88.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Logon
Products
Kb Support
CVE-2025-24741

WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in LOGON KB Support kb-support.This issue affects KB Support: from n/a through <= 1.6.7.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Logon
Products
Kb Support
CVE-2024-8632

KB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 - Missing Authorization to Unauthenticated Ticket Reply Exposure

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbs_ajax_load_front_end_replies' and 'kbs_ajax_mark_reply_as_read' functions in all versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to read replies of any ticket, and mark any reply as read.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cagdasdag Logon
Products
Kb Support Wordpress Help Desk And Knowledge Base Kb Support
CVE-2024-8548

KB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the /includes/ajax-functions.php file all versions up to, and including, 1.6.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbitrary tickets, updating the status of any post, deleting any post, adding notes to tickets, flagging or unflagging tickets, and adding or removing ticket participants.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cagdasdag Logon
Products
Kb Support Wordpress Help Desk And Knowledge Base Kb Support