https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:59:27.913073+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-14929 CVE-2026-14929 — JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR 2026-09-28T17:59:27.914443+00:00

Affected: Unknown JS Help Desk

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.