Vulnerabilities and security researches forkb-support kb-support

Jun 07, 2024

CVE, Research URL: CVE-2023-25983
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Nov 07, 2023
Research Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2023-37890
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Nov 30, 2023
Research Description: Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Desk and Knowledge Base: from n/a through 1.5.88.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-33589
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Apr 29, 2024
Research Description: Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2022-27852
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Apr 15, 2022
Research Description: Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.
Affected versions: Min -, max -.
Status: vulnerable

Oct 02, 2024

CVE, Research URL: CVE-2024-8632
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Oct 01, 2024
Research Description: The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbs_ajax_load_front_end_replies' and 'kbs_ajax_mark_reply_as_read' functions in all versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to read replies of any ticket, and mark any reply as read.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-8548
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Oct 01, 2024
Research Description: The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in all versions up to, and including, 1.6.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbitrary tickets, updating the status of any post, deleting any post, adding notes to tickets, flagging or unflagging tickets, and adding or removing ticket participants.
Affected versions: Min -, max -.
Status: vulnerable

Jan 26, 2025

CVE, Research URL: CVE-2025-24741
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: Jan 27, 2025
Research Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KB Support KB Support. This issue affects KB Support: from n/a through 1.6.7.
Affected versions: Min -, max -.
Status: vulnerable

Apr 06, 2025

CVE, Research URL: CVE-2024-13604
Home page URL: Security reports for KB Support – WordPress Help Desk and Knowledge Base
Application: KB Support – WordPress Help Desk and Knowledge Base
Date: -
Research Description: KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin [kb-support] <= 1.7.4 (unfixed) CVE-2024-13604
Affected versions: Min -, max -.
Status: vulnerable