# Fluent Support – Helpdesk & Customer Support Ticket System <= 2.4.0 - Unauthenticated Sensitive Information Exposure of Agent Details via Customer Portal Ticket Responses

- **ID:** WPSEC-2026-0795
- **Plugin:** Fluent Support – Helpdesk & Customer Support Ticket System (`fluent-support`), https://wordpress.org/plugins/fluent-support/
- **Affected versions:** from 2.1.0 before 2.4.5
- **Fixed in:** 2.4.5 (Update to 2.4.5 or later.)
- **Severity:** Medium 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **Weakness:** CWE-200
- **Usage among sites WPSec scans:** plugin Low, affected versions None seen (as of 2026-10-12)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/fluent-support
- **Fix released:** 2026-10-09
- **Published:** 2026-10-12
- **URL:** https://wpsec.com/vuln/WPSEC-2026-0795/

## Description

The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure via the Customer Portal ticket endpoint in versions 2.1.0 to 2.4.0, due to the response for a ticket that a support agent opened on a customer's behalf including the agent's complete person record (the created_by_person relation), along with internal ticket fields such as the agent-set priority and the email message ID. The endpoint accepts the ticket's signed link without a WordPress login unless signed ticket links are disabled. This makes it possible for unauthenticated attackers who hold the signed link to such a ticket, as well as logged-in customers, to retrieve the email address and WordPress user ID of the support agent who created the ticket.

## References

- https://wpsec.com/vuln/WPSEC-2026-0795/
- https://plugins.svn.wordpress.org/fluent-support/tags/2.4.5/
- https://wordpress.org/plugins/fluent-support/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-0795/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.