Read the docs

Majestic Support

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Majestic Support records in CISA KEV

No Majestic Support vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Majestic Support 2 records LOW

Records

9 records

TI-2025-30609 CVE-2025-48283 · GHSA-7893-p2h2-24qf

WordPress Majestic Support plugin <= 1.1.0 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows SQL Injection.This issue affects Majestic Support: from n/a…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00368 Published 2025-05-23 No fix listed CWE-89
TI-2024-12641 CVE-2024-13600 · GHSA-28ch-8r8v-jcg6

Information disclosure in ahmadmj Majestic Support – The Leading-Edge Help Desk &…

Priority LOW 39

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00499 Published 2025-02-12 No fix listed CWE-200
TI-2025-19856 CVE-2025-26985 · GHSA-p883-5vm2-vwf3

WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.008 Published 2025-02-25 No fix listed CWE-98
TI-2025-39725 CVE-2025-64284 · GHSA-q7hf-mwj3-84gh

WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00398 Published 2025-10-29 No fix listed CWE-98
TI-2025-30608 CVE-2025-48282 · GHSA-fm8h-3cch-f289

WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00274 Published 2025-05-19 No fix listed CWE-862
TI-2026-29446 CVE-2026-40778 · GHSA-3969-mh7w-g5vp

WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00163 Published 2026-04-15 No fix listed CWE-862
TI-2024-12642 CVE-2024-13601 · GHSA-fr5g-5xg9-gw55

Authorization bypass in ahmadmj Majestic Support – The Leading-Edge Help Desk & Customer…

Priority LOW 20

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusererasereque…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00334 Published 2025-02-12 No fix listed CWE-639
Open these records in search →