Medium · 4.3 CVE-2025-30777 EUVD-2025-8398GHSA-jmhj-4wgh-cqpx

WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through <= 1.4.11.

Affected products

Vendor	Product	Affected	Fixed
DevItems	Support Genix	≤ 1.4.11	—

References

https://patchstack.com/database/Wordpress/Plugin/support-genix-lite/vulnerability/wordpress-support-genix-1-4-11-insecure-direct-object-references-idor-vulnerability?_s_id=cve vdb-entry