https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:20:16.723112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343242 EUVD-2026-343242 2026-10-07T01:20:16.725826+00:00 EUVD-2026-343242 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14929 fkie_cve-2026-14929 2026-10-07T01:20:16.725893+00:00

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.

 https://cve.radiocsirt.org/vuln/ghsa-g256-5g3w-9rv9 GHSA-g256-5g3w-9rv9 2026-10-07T01:20:16.725927+00:00

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.