Description
The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name to download other users' private ticket attachments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Support Genix | < 1.4.48 | 1.4.48 |
References
- https://wpscan.com/vulnerability/ef1c6fd5-e62c-4951-a0ba-0e61edb1e795/ exploit vdb-entry technical-description