HIGH🇵🇱 Wersja polska

CVE-2024-13568

CVSS 7.5v3.1pub. 2025-03-01upd. 2026-04-08

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/fluent-support directory which can contain file attachments included in support tickets.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Wpmanageninja Fluent Support

    APP
    Wpmanageninja
    < 1.8.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2024-47304HIGH8.5ten sam produkt

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjaha...

CVE-2023-51547HIGH7.6ten sam produkt

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManage...

CVE-2022-2559HIGH7.2ten sam produkt

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various param...

CVE-2024-47302MEDIUM5.3ten sam produkt

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorre...

CVE-2025-2940HIGH7.2ten sam vendor

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery i...