JS Help Desk WordPress Plugin Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing sensitive information exposure exists in the JS Help Desk – The Ultimate Help Desk & Support Plugin for WordPress, affecting all versions through 2.8.8. The issue arises from the 'jssupportticketdata' directory, where unauthenticated attackers can access sensitive data, including file attachments from support tickets, stored insecurely in the '/wp-content/uploads/jssupportticketdata' directory.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private file attachments included in support tickets.
Remediation
Users can update to version 2.8.9 or a newer patched version to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.