low3.7
CVE-2026-14862
The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who …
Impact
The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket attachments.
Affected products
| Product | Affected versions |
|---|---|
| Support Genix WordPress Plugin | before 1.4.48 |
Versions were read from the advisory text. No structured product data has been published for this record yet.