Vulnerability · Published Feb 12, 2025 · Assigned by Wordfence
CVE-2024-13600Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High 7.5
In plain English
A high-severity information exposure in Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin from ahmadmj. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Official description
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/majesticsupportdata directory which can contain file attachments included in support tickets.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ahmadmj | Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | 0 – through 1.0.5 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N