CVE-2026-14928

JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject

The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated search handler, allowing any authenticated user (Subscriber and above) to read the subject and full message body of every other user's support tickets.

Affected

JS Help Desk

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.37% chance of exploitation in the next 30 days, 30th percentile

Published

2026-07-31

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/c876774c-3cee-4a8a-a448-9d92fd8a4171/

References

• CVE Record
• NVD entry