Fluent Support WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress. This issue affects all versions through 1.8.5. The vulnerability arises from an unprotected directory within the plugin, which allows unauthenticated attackers to access sensitive data, including file attachments from support tickets, stored in the '/wp-content/uploads/fluent-support' directory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private file attachments included in support tickets.

Remediation

Users are advised to update the Fluent Support WordPress plugin to version 1.8.6 or a newer patched version.