Fluent Support – Helpdesk & Customer Support Ticket System <= 2.4.0 - Unauthenticated Sensitive Information Exposure of Agent Details via Customer Portal Ticket Responses
- ID
- WPSEC-2026-0795
- Plugin
- Fluent Support – Helpdesk & Customer Support Ticket System (fluent-support)
- Affected
- from 2.1.0 before 2.4.5
- Remediation
- Update to 2.4.5 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Low · Affected versions None seen among sites WPSec scans, 2026-10-12
- Attack surface
- Fluent Support – Helpdesk & Customer Support Ticket System on WPSec AttackSurface
- Fix released
- Published
Description
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure via the Customer Portal ticket endpoint in versions 2.1.0 to 2.4.0, due to the response for a ticket that a support agent opened on a customer's behalf including the agent's complete person record (the created_by_person relation), along with internal ticket fields such as the agent-set priority and the email message ID. The endpoint accepts the ticket's signed link without a WordPress login unless signed ticket links are disabled. This makes it possible for unauthenticated attackers who hold the signed link to such a ticket, as well as logged-in customers, to retrieve the email address and WordPress user ID of the support agent who created the ticket.
References
- https://wpsec.com/vuln/WPSEC-2026-0795/
- https://plugins.svn.wordpress.org/fluent-support/tags/2.4.5/
- https://wordpress.org/plugins/fluent-support/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS