WordPress security by component
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin
Plugin description
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Apr 05, 2025; the highest CVE/CNA score is 8.8.
Plugin slug:
kb-supportLatest vulnerability
CVE-2024-13604: KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin: Sensitive information exposure
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
| Safe version |
|
||
|---|---|---|---|
| Apr 05, 2025 |
CVE-2024-13604
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin: Sensitive information exposure
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Jan 27, 2025 |
CVE-2025-24741
KB Support: An open redirect
KB Support is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
|
See mitigation notes |
CVE4.7
NVD6.1
|
| Oct 01, 2024 |
CVE-2024-8632
KB Support – WordPress Help Desk and Knowledge Base: A security weakness
KB Support – WordPress Help Desk and Knowledge Base is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 01, 2024 |
CVE-2024-8548
KB Support – WordPress Help Desk and Knowledge Base: A security weakness
KB Support – WordPress Help Desk and Knowledge Base is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE8.1
NVDPending
|
| Apr 29, 2024 |
CVE-2024-33589
KB Support: A security weakness
KB Support is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVD6.5
|
| Nov 30, 2023 |
CVE-2023-37890
KB Support – WordPress Help Desk and Knowledge Base: A security weakness
KB Support – WordPress Help Desk and Knowledge Base is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Nov 07, 2023 |
CVE-2023-25983
KB Support: A security weakness
KB Support is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Apr 15, 2022 |
CVE-2022-27852
Kb Support: Cross-site scripting
Kb Support is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|