Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Majestic Support Clear all filters
TI-2026-29446 CVE-2026-40778 · GHSA-3969-mh7w-g5vp

WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00163 Published 2026-04-15 No fix listed CWE-862
TI-2025-39725 CVE-2025-64284 · GHSA-q7hf-mwj3-84gh

WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00398 Published 2025-10-29 No fix listed CWE-98
TI-2025-30609 CVE-2025-48283 · GHSA-7893-p2h2-24qf

WordPress Majestic Support plugin <= 1.1.0 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows SQL Injection.This issue affects Majestic Support: from n/a…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00368 Published 2025-05-23 No fix listed CWE-89
TI-2025-30608 CVE-2025-48282 · GHSA-fm8h-3cch-f289

WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00274 Published 2025-05-19 No fix listed CWE-862
TI-2025-19856 CVE-2025-26985 · GHSA-p883-5vm2-vwf3

WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.008 Published 2025-02-25 No fix listed CWE-98
TI-2024-12642 CVE-2024-13601 · GHSA-fr5g-5xg9-gw55

Authorization bypass in ahmadmj Majestic Support – The Leading-Edge Help Desk & Customer…

Priority LOW 20

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusererasereque…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00334 Published 2025-02-12 No fix listed CWE-639
TI-2024-12641 CVE-2024-13600 · GHSA-28ch-8r8v-jcg6

Information disclosure in ahmadmj Majestic Support – The Leading-Edge Help Desk &…

Priority LOW 39

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00499 Published 2025-02-12 No fix listed CWE-200