low3.8
CVE-2026-14197
The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted suppo…
Impact
The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope.
Affected products
| Product | Affected versions |
|---|---|
| Fluent Support WordPress Plugin | before 2.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.