Vulnerabilities

TI-2024-12609 CVE-2024-13568 · GHSA-cgj4-6qxq-69w4

Information disclosure in techjewel Fluent Support – Helpdesk & Customer Support Ticket…

LOW 39

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2025-03-01 No fix listed CWE-200

TI-2024-31620 CVE-2024-47302 · GHSA-4w9r-55f5-5mhh

WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability

MEDIUM 48

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through <= 1.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862

TI-2024-31622 CVE-2024-47304 · GHSA-hjh2-x5x2-gfcq

WordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fluent Support fluent-support allows SQL Injection.This issue affects Fluent Support: from n/a through…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00419 Published 2024-10-17 No fix listed CWE-89

TI-2023-28199 CVE-2023-51547 · GHSA-p492-mh45-jmr2

WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Sup…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-31 No fix listed CWE-89

TI-2022-02364 CVE-2022-2559 · GHSA-fwhw-c399-g8qm

Fluent Support < 1.5.8 - Admin+ SQLi